CVE-2020-2143

2020-03-0916:15:13

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.9%

JSON

Jenkins Logstash Plugin 2.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.

CPENameOperatorVersion
logstash-plugineqlogstash-0.7
logstash-plugineqlogstash-2.0.0
logstash-plugineqlogstash-1.1.0
logstash-plugineqlogstash-2.3.1
logstash-plugineqlogstash-2.3.0
logstash-plugineqlogstash-2.1.0
logstash-plugineqlogstash-1.0.2
logstash-plugineqlogstash-1.4.0
logstash-plugineqlogstash-0.7.1
logstash-plugineqlogstash-0.7.2

Name	Operator	Version
logstash-plugin	eq	logstash-0.7
logstash-plugin	eq	logstash-2.0.0
logstash-plugin	eq	logstash-1.1.0
logstash-plugin	eq	logstash-2.3.1
logstash-plugin	eq	logstash-2.3.0
logstash-plugin	eq	logstash-2.1.0
logstash-plugin	eq	logstash-1.0.2
logstash-plugin	eq	logstash-1.4.0
logstash-plugin	eq	logstash-0.7.1
logstash-plugin	eq	logstash-0.7.2