CVE-2014-3679

The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages.

Published Bysecalert@redhat.com

Published DateOct 16, 2014, 19:55

Affected Versions(1)

org.jvnet.hudson.plugins:monitoring(Maven)

Introduced0

Fixed1.53.0

LimitN/A

Package (Ecosystem)	Introduced	Fixed	Limit
org.jvnet.hudson.plugins:monitoring(Maven)	0	1.53.0	N/A

Weakness Type (CWE):NVD-CWE-noinfo

CVSS Metrics

Base Score

Vector String

AV:N/AC:L/Au:N/C:P/I:N/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

PARTIAL

Integrity (I)

NONE

Availability (A)

NONE

References

https://wiki.jenkins-ci.org/display/JENKINS/Monitoring
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01

Weakness Type (CWE):NVD-CWE-noinfo

CVSS Metrics

Base Score

Vector String

AV:N/AC:L/Au:N/C:P/I:N/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

PARTIAL

Integrity (I)

NONE

Availability (A)

NONE