CVE-2023-50777

2023-12-1317:30:21

jenkins

www.cve.org

jenkins

paaslane

estimate plugin

authentication

tokens

job configuration

security issue

potential attack

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.5%

JSON

Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier does not mask PaaSLane authentication tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

CNA Affected

[
  {
    "vendor": "Jenkins Project",
    "product": "Jenkins PaaSLane Estimate Plugin",
    "versions": [
      {
        "version": "0",
        "versionType": "maven",
        "lessThanOrEqual": "1.0.4",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]