Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-2068
HistoryOct 17, 2014 - 12:00 a.m.

CVE-2014-2068

2014-10-1700:00:00
ubuntu.com
ubuntu.com
12

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

47.5%

The doIndex function in hudson/util/RemotingDiagnostics.java in CloudBees
Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated
users with the ADMINISTER permission to obtain sensitive information via
vectors related to heapDump.

Bugs

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

47.5%