Information Disclosure

2020-09-0901:45:30

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

22.0%

JSON

jenkins-credentials-binding-plugin is vulnerable to information disclosure. Improper masking of secrets allows an attacker to retrieve confidential information under certain circumstanes.

CPENameOperatorVersion
jenkins-2-pluginseq3.11.1549642489__1.el7
jenkins-2-pluginseq4.1.1583850385__1.el7
jenkins-2-pluginseq3.11.1579107288__1.el7
jenkins-2-pluginseq4.3.1593080425__1.el7
jenkins-2-pluginseq3.7.1502412812__1.el7
jenkins-2-pluginseq4.1.1556549703__1.el7
jenkins-2-pluginseq3.11.1593081747__1.el7
jenkins-2-pluginseq3.11.1560870549__1.el7
jenkins-2-pluginseq4.3.1581956184__1.el7
jenkins-2-pluginseq3.10.1525788236__1.el7

Name	Operator	Version
jenkins-2-plugins	eq	3.11.1549642489__1.el7
jenkins-2-plugins	eq	4.1.1583850385__1.el7
jenkins-2-plugins	eq	3.11.1579107288__1.el7
jenkins-2-plugins	eq	4.3.1593080425__1.el7
jenkins-2-plugins	eq	3.7.1502412812__1.el7
jenkins-2-plugins	eq	4.1.1556549703__1.el7
jenkins-2-plugins	eq	3.11.1593081747__1.el7
jenkins-2-plugins	eq	3.11.1560870549__1.el7
jenkins-2-plugins	eq	4.3.1581956184__1.el7
jenkins-2-plugins	eq	3.10.1525788236__1.el7