3 matches found
CVE-2023-30514
Jenkins Azure Key Vault Plugin 187.vacd5fecd198a and earlier does not properly mask i.e., replace with asterisks credentials in the build log when push mode for durable task logging is enabled...
7.5CVSS6.7AI score0.0048EPSS
SaveExploits0References1
CVE-2023-30514: Cleartext Transmission of Sensitive Information
Jenkins Azure Key Vault Plugin 187.vacd5fecd198a and earlier does not properly mask i.e., replace with asterisks credentials in the build log when push mode for durable task logging is enabled...
7.5CVSS5.8AI score0.0048EPSS
SaveExploits0References3
CVE-2020-2313: Undefined Security Weakness
A missing permission check in Jenkins Azure Key Vault Plugin 2.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
4.3CVSS5.8AI score0.00786EPSS
SaveExploits0References1
20