CVE-2019-10343

EPSS 0.4%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

31 jul 2019Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Jenkins Configuration as Code Plugin 1.24 and earlier did not properly apply masking to values expected to be hidden when logging the configuration being applied.

Productos afectados

Jenkins project · Jenkins Configuration as Code Plugin

Referencias

https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1279 http://www.openwall.com/lists/oss-security/2019/07/31/1