Описание
Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier includes password parameters from the original build in replayed builds, allowing attackers with Run/Replay permission to obtain the values of password parameters passed to previous builds of a Pipeline.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2648.va9433432b33c (включая)
cpe:2.3:a:jenkins:pipeline\:_groovy:*:*:*:*:*:jenkins:*:*
EPSS
Процентиль: 30%
0.00112
Низкий
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-319
Связанные уязвимости
CVSS3: 4.3
redhat
почти 4 года назад
Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier includes password parameters from the original build in replayed builds, allowing attackers with Run/Replay permission to obtain the values of password parameters passed to previous builds of a Pipeline.
CVSS3: 4.3
github
почти 4 года назад
Jenkins Pipeline: Groovy Plugin has Insufficiently Protected Credentials
EPSS
Процентиль: 30%
0.00112
Низкий
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-319