CVE-2014-2068

EPSS 0.08%

Jenkins allows attackers to obtain sensitive information

Published: 5/17/2022Modified: 12/3/2024

Description

The doIndex function in hudson/util/RemotingDiagnostics.java in CloudBees Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users with the ADMINISTER permission to obtain sensitive information via vectors related to heapDump.

Affected packages (1)

Maven/org.jenkins-ci.main:jenkins-core>= 1.533, < 1.551

References (5)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2014-2068
PATCHhttps://github.com/jenkinsci/jenkins
WEBhttps://github.com/jenkinsci/jenkins/commit/0530a6645aac10fec005614211660e98db44b5eb
WEBhttps://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-02-14
WEBhttp://www.openwall.com/lists/oss-security/2014/02/21/2