Description

The input control in PasswordParameterDefinition in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to obtain passwords by reading the HTML source code, related to the default value.

Remediation

References

CVE-2014-2061

Related Vulnerabilities

Liferay Portal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-35030)

Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4431)

Oracle Database Server CVE-2019-2734 Vulnerability (CVE-2019-2734)

PostgreSQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-5289)

Oracle Database Server CVE-2021-2332 Vulnerability (CVE-2021-2332)

Severity

Medium

Classification

CVE-2014-2061

Tags

Missing Update Known Vulnerabilities