Lucene search
GitHub Advisory DatabaseGHSA-8X8P-MFWV-9FJWHistoryMay 17, 2022 - 3:53 a.m.
Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability
2022-05-1703:53:31
CWE-200
GitHub Advisory Database
github.com
12
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
45.8%
Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/READ permission to obtain the default value for the password field of a parameterized job by reading the DOM.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.jenkins-ci.main:jenkins-core | lt | 1.565.3 | |
| org.jenkins-ci.main:jenkins-core | lt | 1.583 |
Related
prion
prion
Default credentials
2014-10-16 19:55:00
ubuntucve
ubuntucve
CVE-2014-3680
2014-10-16 00:00:00
osv
osv
cve
cve
CVE-2014-3680
2014-10-16 19:55:00
openvas
openvas
Jenkins Multiple Vulnerabilities (Oct 2014) - Linux
2016-08-05 00:00:00
Jenkins Multiple Vulnerabilities (Oct 2014) - Windows
2015-12-21 00:00:00
nessus
nessus
FreeBSD : jenkins -- remote execution, privilege escalation, XSS, password exposure, ACL hole, DoS (549a2771-49cc-11e4-ae2c-c80aa9043978)
2014-10-02 00:00:00
Jenkins < 1.583 / 1.565.3 and Jenkins Enterprise 1.532.x / 1.554.x / 1.565.x < 1.532.10.1 / 1.554.10.1 / 1.565.3.1 Multiple Vulnerabilities
2014-11-04 00:00:00
RHEL 7 : openshift (RHSA-2016:0070)
2018-12-06 00:00:00
freebsd
freebsd
archlinux
archlinux
jenkins: multiple issues
2014-10-02 00:00:00
veracode
veracode
Path Traversal
2019-05-02 05:21:26
Man-In-The-Middle (MitM)
2019-05-02 05:21:35
XML External Entity (XXE)
2019-05-02 05:21:23
redhat
redhat
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
45.8%
Related for GHSA-8X8P-MFWV-9FJW