CVE-2024-3825

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Versions of the BlazeMeter Jenkins plugin prior to 4.22 contain a flaw which results in credential enumeration

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published
Apr 17, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-382507.8Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2024-382527.8Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityCVE-2024-382537.8Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityCVE-2024-382546.2Windows Authentication Information Disclosure VulnerabilityCVE-2024-382558.8SQL Server Native Client Remote Code Execution VulnerabilityCVE-2024-382565.5Windows Kernel-Mode Driver Information Disclosure VulnerabilityCVE-2024-382577.5Microsoft AllJoyn API Information Disclosure VulnerabilityCVE-2024-382587.5Windows Remote Desktop Licensing Service Information Disclosure VulnerabilityCVE-2024-382598.8Microsoft Management Console Remote Code Execution VulnerabilityCVE-2024-38268.6In versions of Akana in versions prior to and including 2022.1.3 validation is broken when using the SAML Single Sign-On (SSO) functionalityCVE-2024-382608.8Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityCVE-2024-382617.8Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-3825: Medium severity, CVSS 4.3 | Vulnix