Business information leak In org.jenkins-ci.main:jenkins-core
Description
Jenkins allows attackers to obtain sensitive information The doIndex function in hudson/util/RemotingDiagnostics.java in CloudBees Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users with the ADMINISTER permission to obtain sensitive information via vectors related to heapDump.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 maven | 1.551, 1.532.2 |
Aliases
1. 2. 3. 4.
References
1. 2. 3.