CVE-2014-2068

CVE-2014-2068 affects CloudBees Jenkins before 1.551 and the LTS line before 1.532.2. The doIndex function in hudson/util/RemotingDiagnostics.java enables remote authenticated users with ADMINISTER permission to obtain sensitive information via heapDump-related vectors. Impact is information disc...

Jenkins Detection

The remote web server hosts Jenkins, a job scheduling / management system and a drop-in replacement for Hudson. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65054; scriptversion"1.20"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/10/03";...

JVN#14791558: Jenkins vulnerable to cross-site scripting

Jenkins is a continuous integration CI tool. Jenkins contains a cross-site scripting vulnerability. Note that this vulnerability is different from JVN79950061. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according...

JVN#79950061: Jenkins vulnerable to cross-site scripting

Jenkins is a continuous integration CI tool. Jenkins contains a cross-site scripting vulnerability. Note that this vulnerability is different from JVN14791558. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according...