Description (CNA)
Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier does not properly mask (i.e., replace with asterisks) usernames of credentials specified in custom Maven settings in Pipeline build logs if "Treat username as secret" is checked.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Jenkins Project / Jenkins Pipeline Maven Integration Plugin | affected 0 through 1330.v18e473854496 |
CWE
No CWE identifiers supplied.
References
- https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3257
- http://www.openwall.com/lists/oss-security/2023/09/06/9
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.