What is GHSA-rxfv-gm5x-9wqj?

GHSA-rxfv-gm5x-9wqj is a security advisory published by GitHub Security Advisories with Medium severity. Jenkin allows attackers to obtain passwords by reading the HTML source code

Which CVE IDs does GHSA-rxfv-gm5x-9wqj cover?

GHSA-rxfv-gm5x-9wqj covers the following CVE IDs: CVE-2014-2061. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-rxfv-gm5x-9wqj?

GHSA-rxfv-gm5x-9wqj affects 2 products, including: maven/org.jenkins-ci.main:jenkins-core:\u003e= 1.533, \u003c 1.551; maven/org.jenkins-ci.main:jenkins-core:\u003c 1.532.2.

GHSA-rxfv-gm5x-9wqjMedium

Jenkin allows attackers to obtain passwords by reading the HTML source code

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

March 5, 2024

🔗 CVE IDs covered (1)

CVE-2014-2061 →

📋 Description

The input control in PasswordParameterDefinition in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to obtain passwords by reading the HTML source code, related to the default value.

🎯 Affected products2

maven/org.jenkins-ci.main:jenkins-core:>= 1.533, < 1.551
maven/org.jenkins-ci.main:jenkins-core:< 1.532.2

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2014-2061
https://github.com/jenkinsci/jenkins/commit/bf539198564a1108b7b71a973bf7de963a6213ef
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-02-14
http://www.openwall.com/lists/oss-security/2014/02/21/2
https://github.com/advisories/GHSA-rxfv-gm5x-9wqj