Executive brief
Improper masking of some secrets in Jenkins Credentials Binding Plugin
Affected products
- Maven org.jenkins-ci.plugins:credentials-binding
Junglewise Threat Intelligence
CVE-2020-2182: Improper masking of some secrets in Jenkins Credentials Binding Plugin
CVE-2020-2182 · Severity: low · CVSS 3 · Published 2022-05-24
Technologies: org.jenkins-ci.plugins:credentials-binding (Maven). Vendors: Maven.
Related threats
- Jenkins Credentials Binding Plugin path traversal in file credentials
- Jenkins Credentials Binding Plugin has a path traversal vulnerability
- Jenkins Credentials Binding Plugin vulnerability can expose sensitive information in logger messages
- Secrets are not masked by Jenkins Credentials Binding Plugin in builds without build steps
- Jenkins Credentials Binding Plugin Stores Passwords in a Recoverable Format