CVE-2023-40340

Jenkins NodeJS Plugin 1.6.0 and earlier does not properly mask (i.e., replace with asterisks) credentials specified in the Npm config file in Pipeline build…

published August 16, 2023

CVSS
—
EPSS
1%
Percentile
49.7
In the wild
Unconfirmed
What it is

Jenkins NodeJS Plugin 1.6.0 and earlier does not properly mask (i.e., replace with asterisks) credentials specified in the Npm config file in Pipeline build logs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00633 · 49.7th percentile
Published
2023-08-16T14:32Z
EPSS history
Timeline
  • 16 AUG 14:32Z
    Jenkins NodeJS Plugin 1.6.0 and earlier does not properly mask (i.e., replace with asterisks) credentials specified in the Npm config file in Pipeline build…
    cvelistv5