Jenkins MQ Notifier Plugin exposes sensitive information in build logs

2024-03-0618:30:38

Google

osv.dev

jenkins

mq notifier

plugin

sensitive information

build logs

debug information

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Jenkins MQ Notifier Plugin 1.4.0 and earlier logs potentially sensitive build parameters as part of debug information in build logs by default.

CPENameOperatorVersion
com.sonymobile.jenkins.plugins.mq:mq-notifiereq1.2.2
com.sonymobile.jenkins.plugins.mq:mq-notifiereq1.0
com.sonymobile.jenkins.plugins.mq:mq-notifiereq1.3.1
com.sonymobile.jenkins.plugins.mq:mq-notifiereq1.2.9
com.sonymobile.jenkins.plugins.mq:mq-notifiereq1.2.7
com.sonymobile.jenkins.plugins.mq:mq-notifiereq1.2.6
com.sonymobile.jenkins.plugins.mq:mq-notifiereq1.3.0
com.sonymobile.jenkins.plugins.mq:mq-notifiereq1.1.5
com.sonymobile.jenkins.plugins.mq:mq-notifiereq1.2.3
com.sonymobile.jenkins.plugins.mq:mq-notifiereq1.2.5

Name	Operator	Version
com.sonymobile.jenkins.plugins.mq:mq-notifier	eq	1.2.2
com.sonymobile.jenkins.plugins.mq:mq-notifier	eq	1.0
com.sonymobile.jenkins.plugins.mq:mq-notifier	eq	1.3.1
com.sonymobile.jenkins.plugins.mq:mq-notifier	eq	1.2.9
com.sonymobile.jenkins.plugins.mq:mq-notifier	eq	1.2.7
com.sonymobile.jenkins.plugins.mq:mq-notifier	eq	1.2.6
com.sonymobile.jenkins.plugins.mq:mq-notifier	eq	1.3.0
com.sonymobile.jenkins.plugins.mq:mq-notifier	eq	1.1.5
com.sonymobile.jenkins.plugins.mq:mq-notifier	eq	1.2.3
com.sonymobile.jenkins.plugins.mq:mq-notifier	eq	1.2.5