GHSA-qwc3-p5pc-q93h

Source

https://github.com/advisories/GHSA-qwc3-p5pc-q93h

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-qwc3-p5pc-q93h/GHSA-qwc3-p5pc-q93h.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-qwc3-p5pc-q93h

Aliases

CVE-2014-3679

Published

2022-05-17T03:51:00Z

Modified

2025-03-13T19:28:46Z

Severity

6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Jenkins Monitoring Plugin Reveals Sensitive Information via Unspecified Pages

Details

The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages.

Database specific

{
    "cwe_ids":  [
        "CWE-284"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2025-03-13T19:05:22Z",
    "nvd_published_at":  "2014-10-16T19:55:00Z",
    "severity":  "MODERATE"
}

References

Affected packages

Maven / org.jvnet.hudson.plugins:monitoring

Package

Name: org.jvnet.hudson.plugins:monitoring; View open source insights on deps.dev
Purl: pkg:maven/org.jvnet.hudson.plugins/monitoring

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.53.0

Affected versions

1.*

1.8.1

1.8.2

1.9.0

1.10.0

1.12.0

1.13.0

1.14.0

1.15.0

1.15.1

1.17.0

1.18.0

1.19.0

1.20.0

1.21.0

1.22.0

1.23.0

1.25.0

1.26.0

1.27.0

1.28.0

1.29.0

1.30.0

1.31.0

1.32.0

1.32.1

1.33.0

1.34.0

1.35.0

1.36.0

1.37.0

1.38.0

1.39.0

1.40.0

1.41.0

1.42.0

1.43.0

1.44.0

1.45.0

1.46.0

1.47.0

1.48.0

1.49.0

1.50.0

1.51.0

1.52.0

1.52.1

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-qwc3-p5pc-q93h/GHSA-qwc3-p5pc-q93h.json"