Description

An exposure of sensitive information vulnerability exists in Jenkins Perforce Plugin version 1.3.36 and older in PerforcePasswordEncryptor.java that allows attackers with insufficient permission to obtain Perforce passwords configured in jobs to obtain them

Remediation

References

https://jenkins.io/security/advisory/2018-03-26/#SECURITY-536

Related Vulnerabilities

CVE-2022-29405 Vulnerability in maven package org.apache.archiva:archiva

CVE-2012-0022 Vulnerability in maven package tomcat:catalina

CVE-2019-3797 Vulnerability in maven package org.springframework.data:spring-data-jpa

CVE-2023-6927 Vulnerability in maven package org.keycloak:keycloak-services

CVE-2021-32013 Vulnerability in npm package xlsx

Severity

High

Classification

CWE-200 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Vendor Advisory