{"id":"CVE-2019-10345","published":"2019-07-31T12:45:21Z","modified":"2024-08-04T22:17:20Z","title":"Jenkins Configuration as Code Plugin 1.20 and earlier did not treat the proxy password as a secret to be masked when…","vendor":"Jenkins","product":"Jenkins Configuration as Code Plugin","tier":"tail","description":{"text":"Jenkins Configuration as Code Plugin 1.20 and earlier did not treat the proxy password as a secret to be masked when logging or encrypted for export.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.0033,"percentile":0.26158,"provenance":"source"},"cwes":[],"references":[{"url":"http://www.openwall.com/lists/oss-security/2019/07/31/1","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1303","tags":["x_refsource_CONFIRM"]}],"priority":{"score":5.2,"factors":[{"name":"EPSS percentile","points":5.23}]},"vendorSlug":"jenkins","affectedVersions":[{"vendor":"Jenkins project","product":"Jenkins Configuration as Code Plugin","versions":["1.20 and earlier"]}],"affected":[{"ecosystem":"Maven","package":"io.jenkins:configuration-as-code","vulnerableRanges":["<1.25"],"patched":["1.25"],"from":["GHSA-ggmx-pq89-7mcr"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-3955","exploited":false,"provenance":"source"}}