Medium · 5.5 CVE-2019-10364 EUVD-2022-5524GHSA-w7fv-7j46-wwrv

Jenkins Amazon EC2 Plugin leaked beginning of private key in system log

Published Jul 31, 2019 · Updated Aug 4, 2024 · Assigned by jenkins

Description

Jenkins Amazon EC2 Plugin 1.43 and earlier wrote the beginning of private keys to the Jenkins system log.

Vendor	Product	Affected	Fixed
Jenkins project	Jenkins Amazon EC2 Plugin	1.43 and earlier	—

Ecosystem	Package	Affected	Fixed	Record
Maven	org.jenkins-ci.plugins:ec2	< 1.44	1.44	GHSA-w7fv-7j46-wwrv