Description

The input control in PasswordParameterDefinition in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to obtain passwords by reading the HTML source code, related to the default value.

Remediation

References

CVE-2014-2061

Related Vulnerabilities

Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-62258)

Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2025-26699)

WordPress Plugin Login With Ajax Cross-Site Scripting (3.0.4)

WordPress Plugin WP Customer Reviews Multiple Vulnerabilities (3.0.8)

Oracle JRE CVE-2018-2815 Vulnerability (CVE-2018-2815)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2014-2061