EUVD-2024-2206

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Jenkins Bitbucket Plugin 886.v44cf5e4ecec5 exposes OAuth token in build log under specific conditions

Reporter	Title	Published	Views	Family All 15
AlpineLinux	CVE-2024-39460	26 Jun 202417:06	–	alpinelinux
BDU FSTEC	The vulnerability of the Jenkins Bitbucket Branch Source Plugin, related to the disclosure of information through registration files, allows a perpetrator to gain unauthorized access to protected information.	10 Jul 202400:00	–	bdu_fstec
CNNVD	Jenkins Plugin Bitbucket Branch Source Security Vulnerability	26 Jun 202400:00	–	cnnvd
CVE	CVE-2024-39460	26 Jun 202417:06	–	cve
Cvelist	CVE-2024-39460	26 Jun 202417:06	–	cvelist
Github Security Blog	Bitbucket OAuth access token exposed in the build log by Bitbucket Branch Source Plugin	26 Jun 202418:30	–	github
Tenable Nessus	Jenkins plugins Multiple Vulnerabilities (2024-06-26)	26 Jun 202400:00	–	nessus
NVD	CVE-2024-39460	26 Jun 202417:15	–	nvd
OSV	GHSA-X8MF-JCMF-R79F Bitbucket OAuth access token exposed in the build log by Bitbucket Branch Source Plugin	26 Jun 202418:30	–	osv
Positive Technologies	PT-2024-4652 · Jenkins · Jenkins Bitbucket Branch Source Plugin	18 Jun 202400:00	–	ptsecurity

[
  {
    "enisaIdVendor": [
      {
        "id": "559eade2-9fbe-3695-ae94-04c6e0675eb9",
        "vendor": {
          "name": "Jenkins Project"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "94f1fb7d-be10-3743-9771-395149e76c5e",
        "product": {
          "name": "Jenkins Bitbucket Branch Source Plugin"
        },
        "product_version": "0 ≤886.v44cf5e4ecec5"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-39460
github	www.github.com/jenkinsci/bitbucket-branch-source-plugin/commit/ad359b3d2d8d6c114025d81abc59b3c9acb636df
github	www.github.com/jenkinsci/bitbucket-branch-source-plugin
jenkins	www.jenkins.io/security/advisory/2024-06-26/
openwall	www.openwall.com/lists/oss-security/2024/06/26/2

03 Oct 2025 20:07Current

4.5Medium risk

Vulners AI Score4.5

CVSS 3.14.3

EPSS0.00489

SSVC