Lucene search

K
osvGoogleOSV:GHSA-RWH3-5G7V-3C5M
HistoryMay 24, 2022 - 5:33 p.m.

Password written to the build log by Jenkins SQLPlus Script Runner Plugin

2022-05-2417:33:08
Google
osv.dev
7
jenkins
sqlplus
password security
build logs
jenkins plugin

EPSS

0.001

Percentile

28.4%

Jenkins SQLPlus Script Runner Plugin 2.0.12 and earlier prints the sqlplus command invocation to the build logs.

This log message does not redact a password provided as part of a command line argument. This password can be viewed by users with Item/Read permission.

Jenkins SQLPlus Script Runner Plugin 2.0.13 no longer prints the password in the build logs.

EPSS

0.001

Percentile

28.4%

Related for OSV:GHSA-RWH3-5G7V-3C5M