CVE-2014-3680

4

MEDIUMCVSS v2

Published

October 16, 2014

Affected

4 projects

Assigned by

Red Hat

Severity scale

010

Description

Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/READ permission to obtain the default value for the password field of a parameterized job by reading the DOM.

jenkinsci/jenkins

GitHubJenkins automation server

<= 1.565.2, <= 1.582NVD

jenkins

Python Package IndexPython ctypes wrapper around Bob Jenkins' hash functions.

<= 1.565.2, <= 1.582NVD

jenkins

NPM

More on this CVE

NVD↗GitHub Advisory↗

Jenkins client

<= 1.565.2, <= 1.582NVD

jenkins

RubyGemsA suite of utilities for bringing continous integration to your projects (not the other way around) with jenkins CI

<= 1.565.2, <= 1.582NVD

Security Advisories

CVE-2014-3680

Description

More on this CVE