Description
Jenkins Ansible Plugin 204.v8191fd551eb_f and earlier does not mask extra variables displayed on the configuration form, increasing the potential for attackers to observe and capture them.
Remediation
References
https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3017
Related Vulnerabilities
CVE-2015-3269 Vulnerability in maven package org.apache.flex.blazeds:flex-messaging-core
CVE-2022-41249 Vulnerability in maven package com.meowlomo.jenkins:scm-httpclient
CVE-2020-11995 Vulnerability in maven package com.caucho:hessian
CVE-2018-17785 Vulnerability in maven package cc.blynk.server.api.core:http-core
CVE-2017-1000034 Vulnerability in maven package com.typesafe.akka:akka-actor