CVE-2023-30513

State: Published
Severity: 7.5 High
Published: Apr 12, 2023
Updated: Feb 7, 2025
Reserved: Apr 12, 2023

Description

Jenkins Kubernetes Plugin 3909.v1f2c633e8590 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	CISA-ADP

Weaknesses

CWE-319 Cleartext Transmission of Sensitive Information

Affected Products

Product	Versions
Jenkins Kubernetes PluginJenkins Project	3910.ve59cec5e33ea_ and laterNot affected 3670.3672.v0ec52a_286336 to before 3670.Not affected 3900.3902.v10b_836a_c8c15 to before 3900.Not affected

References

Jenkins Security Advisory 2023-04-12vendor-advisory
http://www.openwall.com/lists/oss-security/2023/04/13/3

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.