Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2019-10358

Jenkins Maven Integration Plugin 3.3 and earlier did not apply build log decorators to module builds, potentially revealing sensitive build variables in the build log.

VectorNETWORK

PublishedJul 31, 2019, 13:15

Published Byjenkinsci-cert@googlegroups.com

Base Score

Score6.5

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.jenkins-ci.main:maven-plugin(Maven)03.4N/A

References

http://www.openwall.com/lists/oss-security/2019/07/31/1
https://jenkins.io/security/advisory/2019-07-31/#SECURITY-713

Weakness Type

CWE-532

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK