Business information leak In org.jenkins-ci.main:jenkins-core
Description
Jenkin allows attackers to obtain passwords by reading the HTML source code The input control in PasswordParameterDefinition in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to obtain passwords by reading the HTML source code, related to the default value.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 maven | 1.551, 1.532.2 |
Aliases
1. 2. 3. 4.
References
1. 2. 3.