{"id":"CVE-2019-10367","published":"2019-08-07T14:20:23Z","modified":"2024-08-04T22:17:20Z","title":"Due to an incomplete fix of CVE-2019-10343, Jenkins Configuration as Code Plugin 1.26 and earlier did not properly…","vendor":"Jenkins","product":"Jenkins Configuration as Code Plugin","tier":"tail","description":{"text":"Due to an incomplete fix of CVE-2019-10343, Jenkins Configuration as Code Plugin 1.26 and earlier did not properly apply masking to some values expected to be hidden when logging the configuration being applied.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00382,"percentile":0.32184,"provenance":"source"},"cwes":[],"references":[{"url":"http://www.openwall.com/lists/oss-security/2019/08/07/1","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://jenkins.io/security/advisory/2019-08-07/#SECURITY-1497","tags":["x_refsource_CONFIRM"]}],"priority":{"score":6.4,"factors":[{"name":"EPSS percentile","points":6.44}]},"vendorSlug":"jenkins","affectedVersions":[{"vendor":"Jenkins project","product":"Jenkins Configuration as Code Plugin","versions":["1.26 and earlier"]}],"affected":[{"ecosystem":"Maven","package":"io.jenkins:configuration-as-code","vulnerableRanges":["<1.27"],"patched":["1.27"],"from":["GHSA-7c3v-vc3x-x789"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-2971","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-jenkins-configuration-as-code-plugin-cve-2019-10343","parents":[{"from":"CVE-2019-10343","to":"CVE-2019-10367","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"Due to an incomplete fix of CVE-2019-10343, Jenkins Configuration as Code Plugin 1.26 and earlier did not properly apply masking to some values expected to be hidden when logging the configuration being applied.","from":"CVE.org","in":"CVE-2019-10367"},{"kind":"similar","provenance":"machine","score":0.93,"basis":"same product + description similarity"}]}]}}