CVEvulnerability
CVE-2023-30513
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-04-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-319
Description
Jenkins Kubernetes Plugin 3909.v1f2c633e8590 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled.
Affected configurations
• jenkins kubernetes (<= 3909.v1f2c633e8590)
Related
Weakness · CWE (1)
- CWE-319 Cleartext Transmission of Sensitive Information weakness
References
- http://www.openwall.com/lists/oss-security/2023/04/13/3 Mailing List, Third Party Advisory
- https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3075 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2023/04/13/3 Mailing List, Third Party Advisory
- https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3075 Vendor Advisory