Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2023-39155

Jenkins Chef Identity Plugin 2.0.3 and earlier does not mask the user.pem key form field, increasing the potential for attackers to observe and capture it.

VectorNETWORK

PublishedJul 26, 2023, 14:15

Published Byjenkinsci-cert@googlegroups.com

Base Score

Score5.3

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.jenkins-ci.plugins:chef-identity(Maven)0N/AN/A

References

http://www.openwall.com/lists/oss-security/2023/07/26/2
https://www.jenkins.io/security/advisory/2023-07-26/#SECURITY-3192

Weakness Type

CWE-668

CVSS Metrics

Base Score

5.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK