Description

The doIndex function in hudson/util/RemotingDiagnostics.java in CloudBees Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users with the ADMINISTER permission to obtain sensitive information via vectors related to heapDump.

Remediation

References

CVE-2014-2068

Related Vulnerabilities

WordPress Plugin cformsII 'lib_ajax.php' Multiple Cross-Site Scripting Vulnerabilities (13.1)

Oracle Database Server CVE-2012-0525 Vulnerability (CVE-2012-0525)

Lighttpd Uncontrolled Resource Consumption Vulnerability (CVE-2022-30780)

MediaWiki Resource Management Errors Vulnerability (CVE-2015-2936)

Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-1225)

Severity

Low

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2014-2068