VULNERABILITY INTELLIGENCE
CVE-2014-2061
CVSS score5 MEDIUM
EPSS probability2.05%
CISA KEVNot currently listed
Published2014-10-17
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
The input control in PasswordParameterDefinition in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to obtain passwords by reading the HTML source code, related to the default value.
Primary references
- security@debian.org
- security@debian.org — Patch
- security@debian.org — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Patch
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory