logo

Database

Business information leak In org.jenkins-ci.main:jenkins-core

Description

Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to enumerate user names via vectors related to login attempts.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2014-36622. NVD-2014-36623. OSV-2014-36624. GCVE-2014-36625. access.redhat.com6. access.redhat.com7. ACCESS-CVE-2014-3662

References

1. https://bugzilla.redhat.com/show_bug.cgi?id=11477592. https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.