CVE-2019-10345

2019-07-3113:15:12

Google

osv.dev

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Jenkins Configuration as Code Plugin 1.20 and earlier did not treat the proxy password as a secret to be masked when logging or encrypted for export.

CPENameOperatorVersion
configuration-as-code-plugineqconfiguration-as-code-1.11
configuration-as-code-plugineqconfiguration-as-code-1.0-rc3
configuration-as-code-plugineqconfiguration-as-code-1.14
configuration-as-code-plugineqconfiguration-as-code-1.3
configuration-as-code-plugineqconfiguration-as-code-1.8
configuration-as-code-plugineqconfiguration-as-code-1.12
configuration-as-code-plugineqconfiguration-as-code-1.16
configuration-as-code-plugineqconfiguration-as-code-0.4-alpha
configuration-as-code-plugineqconfiguration-as-code-0.2-alpha
configuration-as-code-plugineqconfiguration-as-code-1.9

Name	Operator	Version
configuration-as-code-plugin	eq	configuration-as-code-1.11
configuration-as-code-plugin	eq	configuration-as-code-1.0-rc3
configuration-as-code-plugin	eq	configuration-as-code-1.14
configuration-as-code-plugin	eq	configuration-as-code-1.3
configuration-as-code-plugin	eq	configuration-as-code-1.8
configuration-as-code-plugin	eq	configuration-as-code-1.12
configuration-as-code-plugin	eq	configuration-as-code-1.16
configuration-as-code-plugin	eq	configuration-as-code-0.4-alpha
configuration-as-code-plugin	eq	configuration-as-code-0.2-alpha
configuration-as-code-plugin	eq	configuration-as-code-1.9