CVE-2023-33001

Jenkins HashiCorp Vault Plugin 360.v0a1c04cf807d and earlier does not properly mask i.e., replace with asterisks credentials in the build log when push mode for durable task logging is enabled...

CVE-2023-33001

CVE-2023-33001 affects Jenkins HashiCorp Vault Plugin 360.v0a_1c04cf807d and earlier. The issue is that credentials are not properly masked in build logs when push mode for durable task logging is enabled, exposing sensitive data and harming confidentiality. Root cause: inadequate masking in logs...