Lucene search
GitHub Advisory DatabaseGHSA-JXMW-3GXF-FPRHHistoryAug 24, 2022 - 12:00 a.m.
Improper masking of credentials Jenkins in Git Plugin
2022-08-2400:00:28
CWE-522
GitHub Advisory Database
github.com
10
jenkins
git plugin
credential masking
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
28.4%
Jenkins Git Plugin 4.11.4 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log provided by the Git Username and Password (gitUsernamePassword) credentials binding.
Affected configurations
Node
org.jenkinsci.plugins\Matchgit
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.jenkins-ci.plugins:git | lt | 4.11.5 |
Related
alpinelinux
alpinelinux
CVE-2022-38663
2022-08-23 17:15:15
nvd
nvd
CVE-2022-38663
2022-08-23 17:15:15
osv
osv
Improper masking of credentials Jenkins in Git Plugin
2022-08-24 00:00:28
CVE-2022-38663
2022-08-23 17:15:15
cvelist
cvelist
CVE-2022-38663
2022-08-23 16:45:16
cve
cve
CVE-2022-38663
2022-08-23 17:15:15
prion
prion
Default credentials
2022-08-23 17:15:00
redhatcve
redhatcve
CVE-2022-38663
2022-08-24 05:39:48
nessus
nessus
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
28.4%
Related for GHSA-JXMW-3GXF-FPRH