Lucene search
GitHub Advisory DatabaseGHSA-JXMW-3GXF-FPRHHistoryAug 24, 2022 - 12:00 a.m.
Improper masking of credentials Jenkins in Git Plugin
2022-08-2400:00:28
CWE-522
GitHub Advisory Database
github.com
16
jenkins
git plugin
credential masking
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
28.4%
Jenkins Git Plugin 4.11.4 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log provided by the Git Username and Password (gitUsernamePassword) credentials binding.
Affected configurations
Node
org.jenkins-ci.pluginsgitRange<4.11.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| org.jenkins-ci.plugins | git | * | cpe:2.3:a:org.jenkins-ci.plugins:git:*:*:*:*:*:*:*:* |
Related
prion
prion
Default credentials
2022-08-23 17:15:00
cve
cve
CVE-2022-38663
2022-08-23 17:15:15
nvd
nvd
CVE-2022-38663
2022-08-23 17:15:15
alpinelinux
alpinelinux
CVE-2022-38663
2022-08-23 17:15:15
cvelist
cvelist
CVE-2022-38663
2022-08-23 16:45:16
osv
osv
CVE-2022-38663
2022-08-23 17:15:15
Improper masking of credentials Jenkins in Git Plugin
2022-08-24 00:00:28
redhatcve
redhatcve
CVE-2022-38663
2022-08-24 05:39:48
nessus
nessus
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
28.4%
Related for GHSA-JXMW-3GXF-FPRH