CVE-2014-2068
lowPriorität · verfolgen · 14EPSS 0.014 · 73. PerzentilEUUSEPSS · bewertet 2026-10-27
The doIndex function in hudson/util/RemotingDiagnostics.java in CloudBees Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users with the ADMINISTER permission to obtain sensitive information via vectors related to heapDump.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- Behobenjenkins-0:1.565.3-1.el6op.noarch as a component of RHOSE Node 2.1redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. See the OpenShift Enterprise 2.1 Release Notes, which will be updated shortly for this advisory, for important instructions on how to fully apply this asynchronous errata update: https://access.redhat.com/site/documentation/en-US/OpenShift_Enterprise/2/html-single/2.1_Release_Notes/index.html#chap-Asynchronous_Errata_Updates This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258.
https://access.redhat.com/errata/RHBA-2014:1630 - Behobenjenkins-0:1.565.3-1.el6op.src as a component of RHOSE Node 2.1redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. See the OpenShift Enterprise 2.1 Release Notes, which will be updated shortly for this advisory, for important instructions on how to fully apply this asynchronous errata update: https://access.redhat.com/site/documentation/en-US/OpenShift_Enterprise/2/html-single/2.1_Release_Notes/index.html#chap-Asynchronous_Errata_Updates This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258.
https://access.redhat.com/errata/RHBA-2014:1630 - Behobenjenkins-plugin-openshift-0:0.6.40.1-0.el6op.src as a component of RHOSE Node 2.1redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. See the OpenShift Enterprise 2.1 Release Notes, which will be updated shortly for this advisory, for important instructions on how to fully apply this asynchronous errata update: https://access.redhat.com/site/documentation/en-US/OpenShift_Enterprise/2/html-single/2.1_Release_Notes/index.html#chap-Asynchronous_Errata_Updates This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258.
https://access.redhat.com/errata/RHBA-2014:1630 - Behobenjenkins-plugin-openshift-0:0.6.40.1-0.el6op.x86_64 as a component of RHOSE Node 2.1redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. See the OpenShift Enterprise 2.1 Release Notes, which will be updated shortly for this advisory, for important instructions on how to fully apply this asynchronous errata update: https://access.redhat.com/site/documentation/en-US/OpenShift_Enterprise/2/html-single/2.1_Release_Notes/index.html#chap-Asynchronous_Errata_Updates This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258.
https://access.redhat.com/errata/RHBA-2014:1630 - Behobenopenshift-origin-cartridge-jenkins-0:1.20.3.5-1.el6op.noarch as a component of RHOSE Node 2.1redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. See the OpenShift Enterprise 2.1 Release Notes, which will be updated shortly for this advisory, for important instructions on how to fully apply this asynchronous errata update: https://access.redhat.com/site/documentation/en-US/OpenShift_Enterprise/2/html-single/2.1_Release_Notes/index.html#chap-Asynchronous_Errata_Updates This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258.
https://access.redhat.com/errata/RHBA-2014:1630 - Behobenopenshift-origin-cartridge-jenkins-0:1.20.3.5-1.el6op.src as a component of RHOSE Node 2.1redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. See the OpenShift Enterprise 2.1 Release Notes, which will be updated shortly for this advisory, for important instructions on how to fully apply this asynchronous errata update: https://access.redhat.com/site/documentation/en-US/OpenShift_Enterprise/2/html-single/2.1_Release_Notes/index.html#chap-Asynchronous_Errata_Updates This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258.
https://access.redhat.com/errata/RHBA-2014:1630
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (11)
Betroffene Produkte und Versionsbereiche.
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- RHBA-2014:1630Red Hat Bug Fix Advisory: Red Hat OpenShift Enterprise 2.1 jenkins-plugin-openshift bug fix update2014-10-14csaf · redhat_csafUS
Updated jenkins-plugin-openshift and openshift-origin-cartridge-jenkins packages that fix a bug are now available for Red Hat OpenShift Enterprise 2.1.
- GHSA-pv88-j6rg-r56pJenkins allows attackers to obtain sensitive information2022-05-17ghsa · osvUS
The doIndex function in hudson/util/RemotingDiagnostics.java in CloudBees Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users with the ADMINISTER permission to obtain sensitive information via vectors related to heapDump.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (9)
Externe Belege — Patches, Meldungen, Analysen.
- http://www.openwall.com/lists/oss-security/2014/02/21/2cnnvd
- https://github.com/jenkinsci/jenkins/commit/0530a6645aac10fec005614211660e98db44b5ebcnnvd
- https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-02-14cnnvd
- http://www.openwall.com/lists/oss-security/2014/02/21/2enisa_euvd
- https://github.com/jenkinsci/jenkins/commit/0530a6645aac10fec005614211660e98db44b5ebenisa_euvd
- https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-02-14enisa_euvd
- http://www.openwall.com/lists/oss-security/2014/02/21/2nvd
- https://github.com/jenkinsci/jenkins/commit/0530a6645aac10fec005614211660e98db44b5ebPatchnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan