CVE-2023-40340 — Jenkins Project / Jenkins NodeJS Plugin

CVE-2023-40340

Jenkins Project / Jenkins NodeJS Plugin PUBLISHED

Description (CNA)

Jenkins NodeJS Plugin 1.6.0 and earlier does not properly mask (i.e., replace with asterisks) credentials specified in the Npm config file in Pipeline build logs.

Affected (CNA)

Vendor / product	Versions
Jenkins Project / Jenkins NodeJS Plugin	affected 0 through 1.6.0

CWE

No CWE identifiers supplied.

References

https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3196
http://www.openwall.com/lists/oss-security/2023/08/16/3

ADP enrichment

CVE

No English description supplied.

https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3196
http://www.openwall.com/lists/oss-security/2023/08/16/3

CISA-ADP

No English description supplied.

No references supplied.