Description
The input control in PasswordParameterDefinition in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to obtain passwords by reading the HTML source code, related to the default value.
Remediation
References
Related Vulnerabilities
WordPress Plugin Advanced Ads-Ad Manager & AdSense Cross-Site Scripting (1.17.3)
IBM WebSEAL Session Fixation Vulnerability (CVE-2019-4152)
WordPress Plugin NextCellent Gallery-NextGEN Legacy Cross-Site Scripting (1.9.27)
WordPress Plugin Instagram Plugin-InstaLinker Cross-Site Scripting (1.1.1)
WordPress Plugin Fast Secure Contact Form Cross-Site Scripting (4.0.37)