CVE-2020-2182

2020-05-0613:15:14

Google

osv.dev

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%

JSON

Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a $ character in some circumstances.

CPENameOperatorVersion
credentials-binding-plugineqcredentials-binding-1.4
credentials-binding-plugineqcredentials-binding-1.16
credentials-binding-plugineqcredentials-binding-1.7
credentials-binding-plugineqcredentials-binding-1.2
credentials-binding-plugineqcredentials-binding-1.0-beta-1
credentials-binding-plugineqcredentials-binding-1.10
credentials-binding-plugineqcredentials-binding-1.15
credentials-binding-plugineqcredentials-binding-1.3
credentials-binding-plugineqcredentials-binding-1.20
credentials-binding-plugineqcredentials-binding-1.6

Name	Operator	Version
credentials-binding-plugin	eq	credentials-binding-1.4
credentials-binding-plugin	eq	credentials-binding-1.16
credentials-binding-plugin	eq	credentials-binding-1.7
credentials-binding-plugin	eq	credentials-binding-1.2
credentials-binding-plugin	eq	credentials-binding-1.0-beta-1
credentials-binding-plugin	eq	credentials-binding-1.10
credentials-binding-plugin	eq	credentials-binding-1.15
credentials-binding-plugin	eq	credentials-binding-1.3
credentials-binding-plugin	eq	credentials-binding-1.20
credentials-binding-plugin	eq	credentials-binding-1.6