Description

The doIndex function in hudson/util/RemotingDiagnostics.java in CloudBees Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users with the ADMINISTER permission to obtain sensitive information via vectors related to heapDump.

Remediation

References

CVE-2014-2068

Related Vulnerabilities

Oracle Database Server Other Vulnerability (CVE-2006-3704)

MediaWiki CVE-2023-29140 Vulnerability (CVE-2023-29140)

WordPress Plugin Resume Submissions & Job Postings Arbitrary File Upload (2.5.1)

WordPress Plugin Zingiri Web Shop 'uploadfilexd.php' Arbitrary File Upload (2.4.3)

Oracle JRE CVE-2019-2977 Vulnerability (CVE-2019-2977)

Severity

Low

Classification

CVE-2014-2068 CWE-264

Tags

Missing Update Known Vulnerabilities