CVEvulnerability
CVE-2024-39460
4.3 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-06-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-532
Description
Jenkins Bitbucket Branch Source Plugin 886.v44cf5e4ecec5 and earlier prints the Bitbucket OAuth access token as part of the Bitbucket URL in the build log in some cases.
Affected configurations
• jenkins bitbucket branch source (<= 886.v44cf5e4ecec5)
Related
Weakness · CWE (1)
- CWE-532 Insertion of Sensitive Information into Log File weakness
References
- http://www.openwall.com/lists/oss-security/2024/06/26/2 Mailing List
- https://www.jenkins.io/security/advisory/2024-06-26/#SECURITY-3363 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2024/06/26/2 Mailing List
- https://www.jenkins.io/security/advisory/2024-06-26/#SECURITY-3363 Vendor Advisory