Description
Jenkins Azure Key Vault Plugin 187.va_cd5fecd198a_ and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jenkins Project | Jenkins Azure Key Vault Plugin | ≤ 187.va_cd5fecd198a_ | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.jenkins-ci.plugins:azure-keyvault | < 188.vf46b | 188.vf46b | GHSA-gmxm-pr58-v5jc |
Advisories 1
- WID-SEC-2023-0952 Jenkins Plugins: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 12, 2023