Description
The sidepanel widgets in the CLI command overview and help pages in Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request to the pages.
Remediation
References
Related Vulnerabilities
Grafana Insufficiently Protected Credentials Vulnerability (CVE-2022-31130)
MySQL CVE-2023-22110 Vulnerability (CVE-2023-22110)
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-43952)
Django Improper Authentication Vulnerability (CVE-2014-0482)
Apache Tomcat 7PK - Security Features Vulnerability (CVE-2014-9635)