Bitbucket OAuth access token exposed in the build log by Bitbucket Branch Source Plugin

2024-06-2618:30:28

Google

osv.dev

bitbucket

oauth

access token

build log

bitbucket branch source plugin

software

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Bitbucket Branch Source Plugin 886.v44cf5e4ecec5 and earlier prints the Bitbucket OAuth access token as part of the Bitbucket URL in the build log in some cases.

Bitbucket Branch Source Plugin 887.va_d359b_3d2d8d does not include the Bitbucket OAuth access token as part of the Bitbucket URL in the build log.

CPENameOperatorVersion
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-sourceeq2.9.11.2
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-sourceeq2.7.0
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-sourceeq2.0.2
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-sourceeq804.v8b_0642650b_d2
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-sourceeq2.2.0-beta-1
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-sourceeq746.v350d2781c184
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-sourceeq762.v969cfe087fc0
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-sourceeq2.2.9
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-sourceeq2.9.8
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-sourceeq2.0.0

Name	Operator	Version
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source	eq	2.9.11.2
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source	eq	2.7.0
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source	eq	2.0.2
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source	eq	804.v8b_0642650b_d2
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source	eq	2.2.0-beta-1
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source	eq	746.v350d2781c184
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source	eq	762.v969cfe087fc0
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source	eq	2.2.9
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source	eq	2.9.8
org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source	eq	2.0.0