Jenkins Pipeline Build Step Plugin Information Disclosure Vulnerability

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.An information disclosure vulnerability exists in Jenkins Pipeline Build Step Plugin 2.15 and earlier versions, which stems from displaying password parameter defaults when using the Pipeline snippet generator to generate pipeline scripts. An attacker could exploit this vulnerability to obtain sensitive information.