CVE-2020-2198

Jenkins Project Inheritance Plugin 19.08.02 and earlier does not redact encrypted secrets in the 'getConfigAsXML' API URL when transmitting job config.xml data…

published June 3, 2020

CVSS
—
EPSS
1%
Percentile
56.1
In the wild
Unconfirmed
What it is

Jenkins Project Inheritance Plugin 19.08.02 and earlier does not redact encrypted secrets in the 'getConfigAsXML' API URL when transmitting job config.xml data to users without Job/Configure.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00798 · 56.1th percentile
Published
2020-06-03T12:40Z
EPSS history
Timeline
  • 03 JUN 12:40Z
    Jenkins Project Inheritance Plugin 19.08.02 and earlier does not redact encrypted secrets in the 'getConfigAsXML' API URL when transmitting job config.xml data…
    cvelistv5