Lucene search

K
osvGoogleOSV:GHSA-G84F-CMC8-682C
HistoryFeb 16, 2022 - 12:01 a.m.

Password parameter default values exposed by Jenkins Pipeline: Build Step Plugin

2022-02-1600:01:29
Google
osv.dev
13

0.001 Low

EPSS

Percentile

28.5%

Jenkins Pipeline: Build Step Plugin 2.15 and earlier reveals password parameter default values when generating a pipeline script using the Pipeline Snippet Generator, allowing attackers with Item/Read permission to retrieve the default password parameter value from jobs.

0.001 Low

EPSS

Percentile

28.5%