medium6.9
CVE-2014-3679
Jenkins Monitoring Plugin Reveals Sensitive Information via Unspecified Pages
Impact
The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.jvnet.hudson.plugins:monitoring | < 1.53.0 | 1.53.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins-Ci | Monitoring Plugin | through 1.52.1 Versions 1.40.0, 1.41.0, 1.42.0, 1.43.0, 1.44.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://wiki.jenkins-ci.org/display/JENKINS/Monitoring
- https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01
- https://github.com/advisories/GHSA-qwc3-p5pc-q93h
- https://nvd.nist.gov/vuln/detail/CVE-2014-3679
- https://github.com/jenkinsci/monitoring-plugin/commit/f0f6aeef2032696c97d4b015dd51fa2b841b0473