Lucene search

K
osvGoogleOSV:GHSA-PV88-J6RG-R56P
HistoryMay 17, 2022 - 3:53 a.m.

Jenkins allows attackers to obtain sensitive information

2022-05-1703:53:42
Google
osv.dev
2

5.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.5%

The doIndex function in hudson/util/RemotingDiagnostics.java in CloudBees Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users with the ADMINISTER permission to obtain sensitive information via vectors related to heapDump.

5.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.5%