Lucene search
GitHub Advisory DatabaseGHSA-FJRV-VX9M-4JPJHistoryMar 28, 2023 - 9:30 p.m.
Veracode Scan Jenkins Plugin vulnerable to information disclosure
2023-03-2821:30:20
CWE-214
GitHub Advisory Database
github.com
10
0.0004 Low
EPSS
Percentile
5.2%
Veracode Scan Jenkins Plugin before 23.3.19.0, when configured for remote agent jobs, invokes the Veracode Java API Wrapper in a manner that allows local users (with OS-level access of the Jenkins remote) to discover Veracode API credentials by listing the process and its arguments.
| CPE | Name | Operator | Version |
|---|---|---|---|
| com.veracode.jenkins:veracode-scan | lt | 23.3.19.0 |
Related
cvelist
cvelist
CVE-2023-25722
2023-03-28 00:00:00
cve
cve
CVE-2023-25722
2023-03-28 20:15:11
prion
prion
Code injection
2023-03-28 20:15:00
osv
osv
Veracode Scan Jenkins Plugin vulnerable to information disclosure
2023-03-28 21:30:20
Veracode Scan Jenkins Plugin vulnerable to information disclosure
2023-03-28 21:30:20