{"id":"CVE-2024-3825","details":"Versions of the BlazeMeter Jenkins plugin prior to 4.22 contain a flaw which results in credential enumeration\n","aliases":["GHSA-r52h-fjm7-93j8"],"modified":"2026-07-09T14:42:20.308056Z","published":"2024-04-17T15:15:07.463Z","references":[{"type":"WEB","url":"https://portal.perforce.com/s/detail/a91PA000001STsvYAG"},{"type":"FIX","url":"https://github.com/Blazemeter/blazemeter-jenkins-plugin/commit/11ec94f68136a0612ae1b37b5370053132cb2528"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/blazemeter/blazemeter-jenkins-plugin","events":[{"introduced":"0"},{"fixed":"11ec94f68136a0612ae1b37b5370053132cb2528"}],"database_specific":{"source":"REFERENCES"}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-3825.json","vanir_signatures_modified":"2026-07-09T14:42:20Z","vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://github.com/blazemeter/blazemeter-jenkins-plugin/commit/11ec94f68136a0612ae1b37b5370053132cb2528","target":{"file":"src/main/java/hudson/plugins/blazemeter/BlazeMeterPerformanceBuilderDescriptor.java"},"deprecated":false,"digest":{"line_hashes":["55398296995959694524739076940016225269","330122063651214705191012227075049307410","234274248360534585929256143492136284329","155875056496282783882920043749546181329","160382125366326415660717713472404492987","219661249263138735056847431935148003211","79775321095685078231227326365503335738","310284029113760287968405722837323073299","168997451948667948511957876415153309929","338280397050770264953318513408125363400","170460517245298873969196507643624797939","42981816246632752805201141701979958847","73988353125373319320259432910118747907"],"threshold":0.9},"id":"CVE-2024-3825-815a0c88"}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"}]}