What is the CVSS score of CVE-2026-57285?

CVE-2026-57285 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.2%.

GitHub Branch Source Plugin CVE-2026-57285

EUVD-2026-38765 MEDIUM

Missing Authorization (CWE-862)

2026-06-24 jenkins

GHSA-g7c6-wxjf-8564

Jenkins Authentication Bypass Jenkins Github Branch Source Plugin

4.3

CVSS 3.1 · Vendor: jenkins

Severity by source

Vendor (jenkins) PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

vuln.today AI

4.3 MEDIUM

PR:L reflects mandatory Jenkins authentication (Overall/Read); C:L covers only URL string disclosure with no integrity or availability impact.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Red Hat

4.3 MEDIUM

qualitative

Primary rating from Vendor (jenkins).

CVSS VectorVendor: jenkins

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 22, 2026 - 21:00 vuln.today

CVE Published

Jun 24, 2026 - 13:20 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

A missing permission check in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier allows attackers with Overall/Read permission to obtain the URLs of GitHub Enterprise servers configured in the global plugin configuration.

AnalysisAI

Information disclosure in Jenkins GitHub Branch Source Plugin 1967.1969.v205fd594c821 and earlier exposes GitHub Enterprise server URLs to low-privileged users. Any Jenkins user holding the minimal Overall/Read permission can query the global plugin configuration and retrieve the URLs of all configured GitHub Enterprise servers, potentially revealing internal infrastructure topology. No active exploitation has been identified (SSVC: exploitation none; EPSS 0.21%, 11th percentile), and no public exploit code is known at the time of analysis.

Technical ContextAI

The affected component is the Jenkins GitHub Branch Source Plugin, identified by CPE cpe:2.3:a:jenkins_project:jenkins_github_branch_source_plugin:*:*:*:*:*:*:*:*. Jenkins plugins extend the Jenkins CI/CD platform and can expose internal REST or Stapler action endpoints. CWE-862 (Missing Authorization) describes the root cause: the plugin's endpoint for retrieving global GitHub Enterprise server configuration fails to enforce that the calling user holds a sufficient permission (such as Overall/Administer or an explicit read-configuration right), instead permitting any authenticated user with the baseline Overall/Read permission to access the data. This class of flaw is common in Jenkins plugin development when authorization annotations or explicit permission checks are omitted from action handler methods.

RemediationAI

Update the Jenkins GitHub Branch Source Plugin to a version released after 1967.1969.v205fd594c821, as directed by the Jenkins security advisory at https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3808. The exact patched release version is not independently confirmed from the provided data - administrators should consult the Jenkins Update Center or the advisory page for the minimum safe version. As a compensating control where immediate update is not feasible, restrict the Overall/Read permission to only fully trusted internal users by tightening Jenkins authorization strategy (e.g., Matrix Authorization Strategy), since Overall/Read is the sole prerequisite for exploitation. Note that removing Overall/Read from all non-admin users may break legitimate user workflows such as viewing job status, so assess the operational trade-off before applying this workaround. Monitoring Jenkins audit logs for unexpected access to global configuration endpoints can provide detection coverage in the interim.