Description
An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with insufficient permission to obtain Perforce passwords configured in jobs to obtain them
Remediation
References
https://jenkins.io/security/advisory/2018-03-26/#SECURITY-536
Related Vulnerabilities
CVE-2023-34981 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core
CVE-2015-5348 Vulnerability in maven package org.apache.camel:camel-http
CVE-2021-31522 Vulnerability in maven package org.apache.kylin:kylin-server-base
CVE-2020-25724 Vulnerability in maven package io.quarkus:quarkus-resteasy-reactive-parent-aggregator
CVE-2019-17570 Vulnerability in maven package org.apache.xmlrpc:xmlrpc