The host is installed with Jenkins LTS through 2.73.1 or Jenkins rolling release through 2.83 and is prone to an information disclosure vulnerability. A flaw is present in the application, which fails to properly handle issues in user/(username)/api remote API. Successful exploitation could allow attackers to obtain information about Jenkins user accounts.