Bug Report [critical]

[ovix security <mdovi304@gmail.com>]

Hi Team,
I have found a vulnerability in context to publicly accessible Jenkins dashboard leaks user/employee data due to asynchPeople people Enabled.

Description:

 Due to the publicly exposed Jenkins Dashboard I was able to see user/employee data also project data.source code etc etc

Steps to Reproduce :
1) Go to " https://azure-build.debian.net/asynchPeople/ " (Your company owned)


2) You can see the large list of employee/user data and user id.

Impact:
Sensitive Data Leak publicly
The access also included some source code disclosure

Thank you

Muhammad Danial