DescriptionMurray McAllister
2014-09-30 03:40:46 UTC
Jenkins Security Advisory SECURITY-110 notes:
"Anonymous user can determine whether a specific user name exists in Jenkins or not through a login attempt."
Comment 1Murray McAllister
2014-10-02 02:41:42 UTC
Acknowledgements:
Red Hat would like to thank the Jenkins project for reporting this issue. Upstream acknowledges Daniel Beck as the original reporter.
Comment 2Murray McAllister
2014-10-02 02:49:49 UTC