Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2023-2633

Jenkins Code Dx Plugin 3.1.0 and earlier does not mask Code Dx server API keys displayed on the configuration form, increasing the potential for attackers to observe and capture them.

VectorNETWORK

PublishedMay 16, 2023, 18:15

Published Bydisclosure@synopsys.com

Base Score

Score4.3

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.jenkins-ci.plugins:codedx(Maven)04.0.0N/A

References

https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3146

Weakness Type

CWE-522

CVSS Metrics

Base Score

4.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK