Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability · CVE-2014-3662 · GitHub Advisory Database · GitHub

Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability

Moderate severity GitHub Reviewed Published May 17, 2022 to the GitHub Advisory Database • Updated Feb 8, 2023

Package

org.jenkins-ci.main:jenkins-core (Maven)

Affected versions

>= 1.566, < 1.583

< 1.565.3

Patched versions

1.583

1.565.3

Description

Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to enumerate user names via vectors related to login attempts.

References

Published by the National Vulnerability Database

Oct 16, 2014

Published to the GitHub Advisory Database May 17, 2022

Reviewed Feb 8, 2023

Last updated Feb 8, 2023