CVE-2014-2061 | BDVDB-2026-65176 Detail

Description#

The input control in PasswordParameterDefinition in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to obtain passwords by reading the HTML source code, related to the default value.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/jenkinsci/jenkins/commit/bf539198564a1108b7b71a973bf7de963a6213ef
http://www.openwall.com/lists/oss-security/2014/02/21/2
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-02-14

Exploit#

No public exploit known

History#

Version 12014-10-17Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.