CVE-2014-3680
Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/READ permission to obtain the default value for the password field of a parameterized …
Published: 2014-10-16 · CVSS: Unscored
Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/READ permission to obtain the default value for the password field of a parameterized job by reading the DOM.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7