CVE-2022-38663

🗓️ 23 Aug 2022 16:45:16Reported by jenkinsType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 112 Views

Jenkins Git Plugin 4.11.4 does not mask credentials in build lo

Reporter	Title	Published	Views	Family All 15
ATTACKERKB	CVE-2022-38663	23 Aug 202217:15	–	attackerkb
AlpineLinux	CVE-2022-38663	23 Aug 202216:45	–	alpinelinux
Circl	CVE-2022-38663	23 Aug 202220:27	–	circl
Tenable Nessus	Jenkins Enterprise and Operations Center 2.303.x < 2.303.30.0.16 / 2.346.4.1 Multiple Vulnerabilities (CloudBees Security Advisory 2022-08-27)	5 Oct 202200:00	–	nessus
Tenable Nessus	Jenkins plugins Multiple Vulnerabilities (2022-08-23)	26 Aug 202200:00	–	nessus
CNNVD	Jenkins Plugin Git 安全漏洞	23 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-38663	23 Aug 202216:45	–	cvelist
EUVD	EUVD-2022-6582	3 Oct 202520:07	–	euvd
Github Security Blog	Improper masking of credentials Jenkins in Git Plugin	24 Aug 202200:00	–	github
NVD	CVE-2022-38663	23 Aug 202217:15	–	nvd

NVD

Node

jenkins gitRange≤4.11.4jenkins

[
  {
    "product": "Jenkins Git Plugin",
    "vendor": "Jenkins project",
    "versions": [
      {
        "lessThanOrEqual": "4.11.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "4.9.4"
      }
    ]
  }
]