CVE-2020-2312

2020-11-0414:35:42

jenkins

www.cve.org

0.001 Low

EPSS

Percentile

28.5%

JSON

Jenkins SQLPlus Script Runner Plugin 2.0.12 and earlier does not mask a password provided as command line argument in build logs.

CNA Affected

[
  {
    "product": "Jenkins SQLPlus Script Runner Plugin",
    "vendor": "Jenkins project",
    "versions": [
      {
        "lessThanOrEqual": "2.0.12",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.jenkins.io/security/advisory/2020-11-04/#SECURITY-2129

0.001 Low

EPSS

Percentile

28.5%

JSON

Related for CVELIST:CVE-2020-2312