{"id":"CVE-2019-10343","published":"2019-07-31T12:45:20Z","modified":"2024-08-04T22:17:20Z","title":"Jenkins Configuration as Code Plugin 1.24 and earlier did not properly apply masking to values expected to be hidden…","vendor":"Jenkins","product":"Jenkins Configuration as Code Plugin","tier":"tail","description":{"text":"Jenkins Configuration as Code Plugin 1.24 and earlier did not properly apply masking to values expected to be hidden when logging the configuration being applied.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00368,"percentile":0.30697,"provenance":"source"},"cwes":[],"references":[{"url":"http://www.openwall.com/lists/oss-security/2019/07/31/1","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1279","tags":["x_refsource_CONFIRM"]}],"priority":{"score":6.1,"factors":[{"name":"EPSS percentile","points":6.14}]},"vendorSlug":"jenkins","affectedVersions":[{"vendor":"Jenkins project","product":"Jenkins Configuration as Code Plugin","versions":["1.24 and earlier"]}],"affected":[{"ecosystem":"Maven","package":"io.jenkins:configuration-as-code","vulnerableRanges":["<1.25"],"patched":["1.25"],"from":["GHSA-vwq9-cmqr-3c8c"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-5444","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-jenkins-configuration-as-code-plugin-cve-2019-10343","children":[{"from":"CVE-2019-10343","to":"CVE-2019-10367","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"Due to an incomplete fix of CVE-2019-10343, Jenkins Configuration as Code Plugin 1.26 and earlier did not properly apply masking to some values expected to be hidden when logging the configuration being applied.","from":"CVE.org","in":"CVE-2019-10367"},{"kind":"similar","provenance":"machine","score":0.93,"basis":"same product + description similarity"}]}]}}