Jenkins AWS CodeDeploy Plugin has Insufficiently Protected Credentials

2022-05-1403:00:09

Google

osv.dev

0.001 Low

EPSS

Percentile

21.7%

JSON

Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 and earlier contains a File and Directory Information Exposure vulnerability in AWSCodeDeployPublisher.java that can result in Disclosure of environment variables. This vulnerability appears to have been fixed in 1.20 and later.

CPENameOperatorVersion
com.amazonaws:codedeployeq1.5
com.amazonaws:codedeployeq1.10
com.amazonaws:codedeployeq1.18
com.amazonaws:codedeployeq1.3
com.amazonaws:codedeployeq1.19
com.amazonaws:codedeployeq1.15
com.amazonaws:codedeployeq1.9
com.amazonaws:codedeployeq1.6
com.amazonaws:codedeployeq1.11
com.amazonaws:codedeployeq1.17

Name	Operator	Version
com.amazonaws:codedeploy	eq	1.5
com.amazonaws:codedeploy	eq	1.10
com.amazonaws:codedeploy	eq	1.18
com.amazonaws:codedeploy	eq	1.3
com.amazonaws:codedeploy	eq	1.19
com.amazonaws:codedeploy	eq	1.15
com.amazonaws:codedeploy	eq	1.9
com.amazonaws:codedeploy	eq	1.6
com.amazonaws:codedeploy	eq	1.11
com.amazonaws:codedeploy	eq	1.17