CVE-2019-10367

2019-08-0715:15:12

Google

osv.dev

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.7%

JSON

Due to an incomplete fix of CVE-2019-10343, Jenkins Configuration as Code Plugin 1.26 and earlier did not properly apply masking to some values expected to be hidden when logging the configuration being applied.

CPENameOperatorVersion
configuration-as-code-plugineqconfiguration-as-code-1.11
configuration-as-code-plugineqconfiguration-as-code-1.0-rc3
configuration-as-code-plugineqconfiguration-as-code-1.14
configuration-as-code-plugineqconfiguration-as-code-1.26
configuration-as-code-plugineqconfiguration-as-code-1.3
configuration-as-code-plugineqconfiguration-as-code-1.8
configuration-as-code-plugineqconfiguration-as-code-1.12
configuration-as-code-plugineqconfiguration-as-code-1.16
configuration-as-code-plugineqconfiguration-as-code-1.23
configuration-as-code-plugineqconfiguration-as-code-0.4-alpha

Name	Operator	Version
configuration-as-code-plugin	eq	configuration-as-code-1.11
configuration-as-code-plugin	eq	configuration-as-code-1.0-rc3
configuration-as-code-plugin	eq	configuration-as-code-1.14
configuration-as-code-plugin	eq	configuration-as-code-1.26
configuration-as-code-plugin	eq	configuration-as-code-1.3
configuration-as-code-plugin	eq	configuration-as-code-1.8
configuration-as-code-plugin	eq	configuration-as-code-1.12
configuration-as-code-plugin	eq	configuration-as-code-1.16
configuration-as-code-plugin	eq	configuration-as-code-1.23
configuration-as-code-plugin	eq	configuration-as-code-0.4-alpha