Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets in the build log when the build contains no build steps.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat Openshift | — | Upgrade python-urllib3Upgrade openshift-enterprise-cluster-capacityUpgrade golang-github-openshift-oauth-proxyUpgrade atomic-openshift-cluster-autoscalerUpgrade atomic-openshift-deschedulerUpgrade openshift-kuryrUpgrade jenkins-2-pluginsUpgrade atomic-enterprise-service-catalogUpgrade atomic-openshift-metrics-serverUpgrade atomic-openshift-node-problem-detectorUpgrade openshift-ansibleUpgrade golang-github-prometheus-prometheusUpgrade atomic-openshift-dockerregistryUpgrade golang-github-prometheus-node_exporterUpgrade golang-github-prometheus-alertmanagerUpgrade atomic-openshift-service-idlerUpgrade openshift-enterprise-autoheal | Dec 29, 2020 | May 6, 2020 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub