CVE-2020-2312

2020-11-0415:15:12

Google

osv.dev

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.5%

JSON

Jenkins SQLPlus Script Runner Plugin 2.0.12 and earlier does not mask a password provided as command line argument in build logs.

CPENameOperatorVersion
sqlplus-script-runner-plugineqsqlplus-script-runner-1.0.3
sqlplus-script-runner-plugineqsqlplus-script-runner-2.0.1
sqlplus-script-runner-plugineqsqlplus-script-runner-2.0.11
sqlplus-script-runner-plugineqsqlplus-script-runner-1.0.1
sqlplus-script-runner-plugineqsqlplus-script-runner-2.0.2
sqlplus-script-runner-plugineqsqlplus-script-runner-1.0.0
sqlplus-script-runner-plugineqsqlplus-script-runner-2.0.5
sqlplus-script-runner-plugineqsqlplus-script-runner-2.0.0
sqlplus-script-runner-plugineqsqlplus-script-runner-1.0.10
sqlplus-script-runner-plugineqsqlplus-script-runner-2.0.9

Name	Operator	Version
sqlplus-script-runner-plugin	eq	sqlplus-script-runner-1.0.3
sqlplus-script-runner-plugin	eq	sqlplus-script-runner-2.0.1
sqlplus-script-runner-plugin	eq	sqlplus-script-runner-2.0.11
sqlplus-script-runner-plugin	eq	sqlplus-script-runner-1.0.1
sqlplus-script-runner-plugin	eq	sqlplus-script-runner-2.0.2
sqlplus-script-runner-plugin	eq	sqlplus-script-runner-1.0.0
sqlplus-script-runner-plugin	eq	sqlplus-script-runner-2.0.5
sqlplus-script-runner-plugin	eq	sqlplus-script-runner-2.0.0
sqlplus-script-runner-plugin	eq	sqlplus-script-runner-1.0.10
sqlplus-script-runner-plugin	eq	sqlplus-script-runner-2.0.9