CVE-2024-39458

2024-06-2704:23:42

redhat.com

access.redhat.com

jenkins

structs plugin

vulnerability disclosure

build step

diagnostic information

secrets

exposure

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

A vulnerability was found in the Jenkins Structs Plugin. When it fails to configure a build step, it logs a warning message containing diagnostic information that may contain secrets passed as step parameters, potentially resulting in accidental exposure of secrets through the default system log.