description: Jenkins Pipeline: Build Step Plugin 2.15 and earlier reveals password parameter default values when generating a pipeline script using the Pipeline Snippet Generator, allowing attackers with Item/Read permission to retrieve the default password parameter value from jobs.
affected:
{
product: Jenkins Pipeline: Build Step Plugin
vendor: Jenkins project
versions:
lessThanOrEqual: 2.15, status: affected, version: unspecified, versionType: custom
status: unaffected, version: 2.13.1
}