CVE-2023-39152

Summary

Always-incorrect control flow implementation in Jenkins Gradle Plugin 2.8 may result in credentials not being masked (i.e., replaced with asterisks) in the build log in some circumstances.

Affected Software

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

• https://www.jenkins.io/security/advisory/2023-07-26/#SECURITY-3208
• http://www.openwall.com/lists/oss-security/2023/07/26/2

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.jenkins.io/security/advisory/2023-07-26/#SECURITY-3208
• http://www.openwall.com/lists/oss-security/2023/07/26/2

• ←Previous
• Next→