Servers and applications
CVE-2014-2061
The input control in PasswordParameterDefinition in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to obtain passwords by reading the HTML source code, related to the default value.
- Severity
- Medium 5.0
- Published
- 17 Oct 2014
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Exploit chance
- 2% in the next 30 daysHigher than 81% of CVEs. EPSS by FIRST, 12 Nov 2026
- Weakness
- CWE-310
- Attack
- Over the network · No login needed
- Attacker can
- Read some data
- CVSS vector
AV:N/AC:L/Au:N/C:P/I:N/A:N- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
JenkinsServers and applications · cpe:a:jenkins:jenkins |
|