CVE-2014-3680: Exposure of Sensitive Information to an Unauthorized Actor

May 17, 2022 (updated February 8, 2023)

CVE-2014-3680 jenkins: password exposure in DOM (SECURITY-138)

References

access.redhat.com/errata/RHSA-2016:0070
access.redhat.com/security/cve/CVE-2014-3680
bugzilla.redhat.com/show_bug.cgi?id=1148645
github.com/advisories/GHSA-8x8p-mfwv-9fjw
nvd.nist.gov/vuln/detail/CVE-2014-3680
wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01

Detect and mitigate CVE-2014-3680 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →