CVE-2024-9453 — Jenkins-image: sensitive data disclosure when using openshift jenkins image

CVE-2024-9453

Jenkins-image: sensitive data disclosure when using openshift jenkins image PUBLISHED

Description (CNA)

A vulnerability was found in Red Hat OpenShift Jenkins. The bearer token is not obfuscated in the logs and potentially carries a high risk if those logs are centralized when collected. The token is typically valid for one year. This flaw allows a malicious user to jeopardize the environment if they have access to sensitive information.

Affected (CNA)

Vendor / product	Versions
Jenkins / openshift-sync-plugin	affected 0 before 1.1.0.818.v3883b_3b_df89a_
Red Hat / OpenShift Developer Tools and Services	affected

CWE

CWE-532

References

https://access.redhat.com/security/cve/CVE-2024-9453
https://bugzilla.redhat.com/show_bug.cgi?id=2316231

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.