CVE-2023-33001

Description

Jenkins HashiCorp Vault Plugin 360.v0a_1c04cf807d and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.327

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2023-33001 are affected in Jenkins - hashicorp-vault-plugin 360.v0a	Windows
Vulnerabilities CVE-2023-33001 are affected in Jenkins - hashicorp-vault-plugin for Linux 360.v0a	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234