Description

The input control in PasswordParameterDefinition in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to obtain passwords by reading the HTML source code, related to the default value.

Remediation

References

CVE-2014-2061

Related Vulnerabilities

Oracle Database Server CVE-2010-4421 Vulnerability (CVE-2010-4421)

Dotclear Other Vulnerability (CVE-2005-3957)

WordPress Plugin Abandoned Cart Lite for WooCommerce Cross-Site Request Forgery (5.8.5)

WordPress Plugin WP-Live Chat by 3CX Security Bypass (8.0.32)

XWiki Exposure of Private Personal Information to an Unauthorized Actor Vulnerability (CVE-2022-41936)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2014-2061