Description (CNA)
Jenkins Kubernetes Plugin 3909.v1f2c633e8590 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Jenkins Project / Jenkins Kubernetes Plugin | unaffected 3910.ve59cec5e33ea_ before *; unaffected 3670.3672.v0ec52a_286336 before 3670.*; unaffected 3900.3902.v10b_836a_c8c15 before 3900.* |
CWE
No CWE identifiers supplied.
References
- https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3075
- http://www.openwall.com/lists/oss-security/2023/04/13/3
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.