Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2023-50777

Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier does not mask PaaSLane authentication tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

VectorNETWORK

PublishedDec 13, 2023, 18:15

Published Byjenkinsci-cert@googlegroups.com

Base Score

Score4.3

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

com.cloudtp.jenkins:paaslane-estimate(Maven)0N/AN/A

References

http://www.openwall.com/lists/oss-security/2023/12/13/4
https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3182

Weakness Type

CWE-312

CVSS Metrics

Base Score

4.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK