CVE-2024-39460

State: Published
Severity: 4.3 Medium
Published: Jun 26, 2024
Updated: Feb 13, 2025
Reserved: Jun 25, 2024

Description

Jenkins Bitbucket Branch Source Plugin 886.v44cf5e4ecec5 and earlier prints the Bitbucket OAuth access token as part of the Bitbucket URL in the build log in some cases.

Scores

CVSS	Score	Vector	Source
3.1	4.3 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	CISA-ADP

Weaknesses

CWE-532 Insertion of Sensitive Information into Log File

Affected Products

Product	Versions
Jenkins Bitbucket Branch Source PluginJenkins Project	886.v44cf5e4ecec5 and earlierAffected

References

Jenkins Security Advisory 2024-06-26vendor-advisory
http://www.openwall.com/lists/oss-security/2024/06/26/2

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.