Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pv88-j6rg-r56p

Опубликовано: 17 мая 2022
Источник: github
Github: Прошло ревью

Описание

Jenkins allows attackers to obtain sensitive information

The doIndex function in hudson/util/RemotingDiagnostics.java in CloudBees Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users with the ADMINISTER permission to obtain sensitive information via vectors related to heapDump.

Пакеты

Наименование

org.jenkins-ci.main:jenkins-core

maven
Затронутые версииВерсия исправления

>= 1.533, < 1.551

1.551

Наименование

org.jenkins-ci.main:jenkins-core

maven
Затронутые версииВерсия исправления

< 1.532.2

1.532.2

EPSS

Процентиль: 25%
0.00085
Низкий

Связанные уязвимости

ubuntu
больше 11 лет назад

The doIndex function in hudson/util/RemotingDiagnostics.java in CloudBees Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users with the ADMINISTER permission to obtain sensitive information via vectors related to heapDump.

redhat
около 12 лет назад

The doIndex function in hudson/util/RemotingDiagnostics.java in CloudBees Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users with the ADMINISTER permission to obtain sensitive information via vectors related to heapDump.

nvd
больше 11 лет назад

The doIndex function in hudson/util/RemotingDiagnostics.java in CloudBees Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users with the ADMINISTER permission to obtain sensitive information via vectors related to heapDump.

debian
больше 11 лет назад

The doIndex function in hudson/util/RemotingDiagnostics.java in CloudB ...

EPSS

Процентиль: 25%
0.00085
Низкий