CVE-2024-47803 — Jenkins Project / Jenkins

CVE-2024-47803

Jenkins Project / Jenkins PUBLISHED

Description (CNA)

Jenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.

Affected (CNA)

Vendor / product	Versions
Jenkins Project / Jenkins	unaffected 2.462.3 before 2.462.; unaffected 2.479 before

CWE

No CWE identifiers supplied.

References

https://www.jenkins.io/security/advisory/2024-10-02/#SECURITY-3451

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.