CVE-2023-40339

Jenkins Config File Provider Plugin 952.va_544a_6234b_46 and earlier does not mask (i.e., replace with asterisks) credentials specified in configuration files…

published August 16, 2023

CVSS
—
EPSS
1%
Percentile
55.4
In the wild
Unconfirmed
What it is

Jenkins Config File Provider Plugin 952.va_544a_6234b_46 and earlier does not mask (i.e., replace with asterisks) credentials specified in configuration files when they're written to the build log.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00778 · 55.4th percentile
Published
2023-08-16T14:32Z
EPSS history
Timeline
  • 16 AUG 14:32Z
    Jenkins Config File Provider Plugin 952.va_544a_6234b_46 and earlier does not mask (i.e., replace with asterisks) credentials specified in configuration files…
    cvelistv5