Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-28154 EUVD-2024-0873GHSA-8fm4-r23p-v68v

Jenkins MQ Notifier Plugin exposes sensitive information in build logs

Published Mar 6, 2024 · Updated Mar 27, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins MQ Notifier Plugin Package: com.sonymobile.jenkins.plugins.mq:mq-notifier Category: Web / CMS Ecosystem: Maven

Description

Jenkins MQ Notifier Plugin 1.4.0 and earlier logs potentially sensitive build parameters as part of debug information in build logs by default.

Affected products

VendorProductAffectedFixed
Jenkins Project Jenkins MQ Notifier Plugin ≤ 1.4.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven com.sonymobile.jenkins.plugins.mq:mq-notifier < 1.4.1 1.4.1 GHSA-8fm4-r23p-v68v

Advisories 1

References