Sensitive Information Disclosure

Jenkins Pipeline is vulnerable to sensitive information disclosure. It includes password parameters from the original build in replayed builds, allowing attackers with Run/Replay permission to obtain the values of password parameters passed to previous builds of a Pipeline. A flaw was found in...