CVE-2023-30513

Опубликовано: 12 апр. 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Jenkins Kubernetes Plugin 3909.v1f2c633e8590 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled.

Ссылки

http://www.openwall.com/lists/oss-security/2023/04/13/3
Mailing List
Third Party Advisory
https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3075
Vendor Advisory
http://www.openwall.com/lists/oss-security/2023/04/13/3
Mailing List
Third Party Advisory
https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3075
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:jenkins:kubernetes:*:*:*:*:*:jenkins:*:*

Версия до 3909.v1f2c633e8590 (включая)

EPSS

Процентиль: 17%

0.00055

Низкий

7.5 High

CVSS3

Дефекты

CWE-319

Связанные уязвимости

CVE-2023-30513

CVSS3: 7.5

redhat

около 2 лет назад