GHSA-v67x-gpg7-mwv3

ghsaUSosv

Exposure of Sensitive Information in Jenkins Kubernetes Plugin

view advisory published 2022-05-14Licence: CC-BY-4.0

A exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.7.0 and older in ContainerExecDecorator.java that results in sensitive variables such as passwords being written to logs.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2018-1000187US	medium6.5	1.12% (66th)	—	2018-06-05
A exposure of sensitive information vulnerability exists in Jenkins Kubernetes Plugin 1.7.0 and older in ContainerExecDecorator.java that results in sensitive variables such as pas…

references

External citations — patches, advisories, analysis.

https://github.com/jenkinsci/kubernetes-plugin/commit/43a1d15b0875ae89ae16f2a2bfdd44ffd1e5f46dWEB
https://jenkins.io/security/advisory/2018-06-04/#SECURITY-883WEB
https://nvd.nist.gov/vuln/detail/CVE-2018-1000187ADVISORY
https://www.jenkins.io/security/advisory/2018-06-04/#SECURITY-883WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan