CVE-2023-30515

2023-04-1217:05:07

jenkins

www.cve.org

jenkins

thycotic

devops

secrets vault plugin

credentials

build log

push mode

cve-2023-30515

EPSS

0.002

Percentile

60.8%

JSON

Jenkins Thycotic DevOps Secrets Vault Plugin 1.0.0 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled.

CNA Affected

[
  {
    "defaultStatus": "unknown",
    "product": "Jenkins Thycotic DevOps Secrets Vault Plugin",
    "vendor": "Jenkins Project",
    "versions": [
      {
        "lessThanOrEqual": "1.0.0",
        "status": "affected",
        "version": "0",
        "versionType": "maven"
      }
    ]
  }
]