Description

The doIndex function in hudson/util/RemotingDiagnostics.java in CloudBees Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users with the ADMINISTER permission to obtain sensitive information via vectors related to heapDump.

Remediation

References

CVE-2014-2068

Related Vulnerabilities

Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-5319)

Apache Tomcat Data Processing Errors Vulnerability (CVE-2014-0227)

OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0703)

Drupal Reliance on Cookies without Validation and Integrity Checking Vulnerability (CVE-2022-29248)

WordPress 4.9.x Prototype Pollution (4.9 - 4.9.19)

Severity

Low

Classification

CVE-2014-2068 CWE-264

Tags

Missing Update Known Vulnerabilities