CVE-2023-41934

Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier does not properly mask (i.e., replace with asterisks) usernames of credentials…

published September 6, 2023

CVSS
—
EPSS
1%
Percentile
50.5
In the wild
Unconfirmed
What it is

Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier does not properly mask (i.e., replace with asterisks) usernames of credentials specified in custom Maven settings in Pipeline build logs if "Treat username as secret" is checked.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00650 · 50.5th percentile
Published
2023-09-06T12:08Z
EPSS history
Timeline
  • 06 SEP 12:08Z
    Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier does not properly mask (i.e., replace with asterisks) usernames of credentials…
    cvelistv5