CVE-2023-27904: 
Java vulnerability analysis and mitigation

CVE-2023-27904 (SECURITY-2120) is an information disclosure vulnerability discovered in Jenkins. The vulnerability affects Jenkins versions 2.393 and earlier, as well as LTS 2.375.3 and earlier, where the system prints error stack traces on agent-related pages when agent connections are broken (Jenkins Advisory).

The vulnerability has been assigned a Low severity CVSS score. When agent connections are broken, the affected Jenkins versions display error stack traces on agent-related pages, which may expose sensitive information about Jenkins configuration that should not be accessible to potential attackers (Jenkins Advisory).

The primary impact of this vulnerability is the potential exposure of Jenkins configuration information through the displayed stack traces. This information disclosure could provide attackers with insights into system configuration details that are normally restricted from unauthorized access (Jenkins Advisory).

The vulnerability has been fixed in Jenkins 2.394, LTS 2.375.4, and LTS 2.387.1. These versions have been modified to prevent the display of error stack traces when agent connections are broken. Users are advised to upgrade to these or later versions to address the vulnerability (Jenkins Advisory).