Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2023-30513

Jenkins Kubernetes Plugin 3909.v1f2c633e8590 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled.

VectorNETWORK

PublishedApr 12, 2023, 18:15

Published Byjenkinsci-cert@googlegroups.com

Base Score

Score7.5

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.csanchez.jenkins.plugins:kubernetes(Maven)03910.ve59cec5e33eaN/A

References

http://www.openwall.com/lists/oss-security/2023/04/13/3
https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3075

Weakness Type

CWE-319

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK