CVE-2020-2181

Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets in the build log when the build contains no build…

published May 6, 2020

CVSS
—
EPSS
1%
Percentile
65.6
In the wild
Unconfirmed
What it is

Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets in the build log when the build contains no build steps.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01108 · 65.6th percentile
Published
2020-05-06T12:45Z
EPSS history
Timeline
  • 06 MAY 12:45Z
    Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets in the build log when the build contains no build…
    cvelistv5