Lucene search

K
cve[email protected]CVE-2014-3679
HistoryOct 16, 2014 - 7:55 p.m.

CVE-2014-3679

2014-10-1619:55:08
web.nvd.nist.gov
24
nvd
cve-2014-3679
monitoring plugin
jenkins
sensitive information
remote attackers

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.5%

The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages.

Affected configurations

NVD
Node
jenkins-cimonitoring_pluginRange1.52.1cloudbees_jenkins
OR
jenkins-cimonitoring_pluginMatch1.40.0cloudbees_jenkins
OR
jenkins-cimonitoring_pluginMatch1.41.0cloudbees_jenkins
OR
jenkins-cimonitoring_pluginMatch1.42.0cloudbees_jenkins
OR
jenkins-cimonitoring_pluginMatch1.43.0cloudbees_jenkins
OR
jenkins-cimonitoring_pluginMatch1.44.0cloudbees_jenkins
OR
jenkins-cimonitoring_pluginMatch1.45.0cloudbees_jenkins
OR
jenkins-cimonitoring_pluginMatch1.46.0cloudbees_jenkins
OR
jenkins-cimonitoring_pluginMatch1.47.0cloudbees_jenkins
OR
jenkins-cimonitoring_pluginMatch1.48.0cloudbees_jenkins
OR
jenkins-cimonitoring_pluginMatch1.49.0cloudbees_jenkins
OR
jenkins-cimonitoring_pluginMatch1.50.0cloudbees_jenkins
OR
jenkins-cimonitoring_pluginMatch1.51.0cloudbees_jenkins
OR
jenkins-cimonitoring_pluginMatch1.52.0cloudbees_jenkins

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.5%