Jenkins Configuration as Code Plugin 1.20 and earlier did not treat the proxy password as a secret to be masked when logging or encrypted for export...
5.5CVSS7AI score0.0033EPSS
SaveExploits0References1
Cvelist•added 2019/07/31 12:45 p.m.•40 views
CVE-2019-10343
Jenkins Configuration as Code Plugin 1.24 and earlier did not properly apply masking to values expected to be hidden when logging the configuration being applied...