Lucene search
HistoryJul 26, 2023 - 2:15 p.m.
CVE-2023-39155
cve-2023-39155
jenkins
chef identity plugin
user.pem key
exposure
vulnerability
attackers
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
5.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
19.5%
Jenkins Chef Identity Plugin 2.0.3 and earlier does not mask the user.pem key form field, increasing the potential for attackers to observe and capture it.
Affected configurations
Node
jenkinschef_identityRange≤2.0.3jenkins
Related
veracode
veracode
Information Disclosure
2023-07-29 09:51:24
cve
cve
CVE-2023-39155
2023-07-26 14:15:10
cvelist
cvelist
CVE-2023-39155
2023-07-26 13:54:54
osv
osv
Secret displayed without masking by Chef Identity Plugin
2023-07-26 15:30:57
prion
prion
Design/Logic Flaw
2023-07-26 14:15:00
github
github
Secret displayed without masking by Chef Identity Plugin
2023-07-26 15:30:57
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2023-07-26)
2023-07-28 00:00:00
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
5.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
19.5%
Related for NVD:CVE-2023-39155