Executive brief
Secrets are not masked by Jenkins Credentials Binding Plugin in builds without build steps
Affected products
- Maven org.jenkins-ci.plugins:credentials-binding
Junglewise Threat Intelligence
CVE-2020-2181: Secrets are not masked by Jenkins Credentials Binding Plugin in builds without build steps
CVE-2020-2181 · Severity: low · CVSS 3 · Published 2022-05-24
Technologies: org.jenkins-ci.plugins:credentials-binding (Maven). Vendors: Maven.
Related threats
- Jenkins Credentials Binding Plugin path traversal in file credentials
- Jenkins Credentials Binding Plugin has a path traversal vulnerability
- Jenkins Credentials Binding Plugin vulnerability can expose sensitive information in logger messages
- Improper masking of some secrets in Jenkins Credentials Binding Plugin
- Jenkins Credentials Binding Plugin Stores Passwords in a Recoverable Format