5

CVE-2014-3679

The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Jenkins-ci ≫ Monitoring Plugin SwPlatform cloudbees_jenkins Version <= 1.52.1
Jenkins-ci ≫ Monitoring Plugin Version 1.40.0 SwPlatform cloudbees_jenkins
Jenkins-ci ≫ Monitoring Plugin Version 1.41.0 SwPlatform cloudbees_jenkins
Jenkins-ci ≫ Monitoring Plugin Version 1.42.0 SwPlatform cloudbees_jenkins
Jenkins-ci ≫ Monitoring Plugin Version 1.43.0 SwPlatform cloudbees_jenkins
Jenkins-ci ≫ Monitoring Plugin Version 1.44.0 SwPlatform cloudbees_jenkins
Jenkins-ci ≫ Monitoring Plugin Version 1.45.0 SwPlatform cloudbees_jenkins
Jenkins-ci ≫ Monitoring Plugin Version 1.46.0 SwPlatform cloudbees_jenkins
Jenkins-ci ≫ Monitoring Plugin Version 1.47.0 SwPlatform cloudbees_jenkins
Jenkins-ci ≫ Monitoring Plugin Version 1.48.0 SwPlatform cloudbees_jenkins
Jenkins-ci ≫ Monitoring Plugin Version 1.49.0 SwPlatform cloudbees_jenkins
Jenkins-ci ≫ Monitoring Plugin Version 1.50.0 SwPlatform cloudbees_jenkins
Jenkins-ci ≫ Monitoring Plugin Version 1.51.0 SwPlatform cloudbees_jenkins
Jenkins-ci ≫ Monitoring Plugin Version 1.52.0 SwPlatform cloudbees_jenkins
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.78% 0.754
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01
Vendor Advisory
https://wiki.jenkins-ci.org/display/JENKINS/Monitoring
Vendor Advisory