Description

The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages.

Remediation

References

https://wiki.jenkins-ci.org/display/JENKINS/Monitoring

https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01

Related Vulnerabilities

CVE-2011-4838 Vulnerability in maven package org.jruby:jruby

CVE-2018-1000604 Vulnerability in maven package org.jenkins-ci.plugins:badge

CVE-2018-1000147 Vulnerability in maven package org.jvnet.hudson.plugins:perforce

CVE-2015-5349 Vulnerability in maven package org.apache.directory.studio:org.apache.directory.studio.ldapbrowser.core

CVE-2020-1942 Vulnerability in maven package org.apache.nifi:nifi-web-security

Severity

Critical

Tags

Vendor Advisory NVD-CWE-noinfo