CVE-2022-38663

Jenkins Git Plugin 4.11.4 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log provided by the Git Username and…

published August 23, 2022

CVSS
—
EPSS
1%
Percentile
60.5
In the wild
Unconfirmed
What it is

Jenkins Git Plugin 4.11.4 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log provided by the Git Username and Password (`gitUsernamePassword`) credentials binding.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00939 · 60.5th percentile
Published
2022-08-23T16:45Z
EPSS history
Timeline
  • 23 AUG 16:45Z
    Jenkins Git Plugin 4.11.4 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log provided by the Git Username and…
    cvelistv5