Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2023-30524

Jenkins Report Portal Plugin 0.5 and earlier does not mask ReportPortal access tokens displayed on the configuration form, increasing the potential for attackers to observe and capture them.

VectorNETWORK

PublishedApr 12, 2023, 18:15

Published Byjenkinsci-cert@googlegroups.com

Base Score

Score4.3

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.jenkins-ci.plugins:reportportal(Maven)0N/AN/A

References

http://www.openwall.com/lists/oss-security/2023/04/13/3
https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2945

Weakness Type

NVD-CWE-noinfo

CVSS Metrics

Base Score

4.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK