CVEvulnerability
CVE-2014-3679
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-10-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages.
Affected configurations
• jenkins-ci monitoring plugin (<= 1.52.1)
• jenkins-ci monitoring plugin 1.40.0
• jenkins-ci monitoring plugin 1.41.0
• jenkins-ci monitoring plugin 1.42.0
• jenkins-ci monitoring plugin 1.43.0
• jenkins-ci monitoring plugin 1.44.0
• jenkins-ci monitoring plugin 1.45.0
• jenkins-ci monitoring plugin 1.46.0
• jenkins-ci monitoring plugin 1.47.0
• jenkins-ci monitoring plugin 1.48.0
• jenkins-ci monitoring plugin 1.49.0
• jenkins-ci monitoring plugin 1.50.0
• jenkins-ci monitoring plugin 1.51.0
• jenkins-ci monitoring plugin 1.52.0
References
- https://wiki.jenkins-ci.org/display/JENKINS/Monitoring Vendor Advisory
- https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01 Vendor Advisory
- https://wiki.jenkins-ci.org/display/JENKINS/Monitoring Vendor Advisory
- https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01 Vendor Advisory