CVE-2023-30515: high-severity vulnerability in Jenkins Thycotic DevOps Secrets Vault Plugin
Published · Updated
Follow this CVE+ Monitor Jenkins Thycotic DevOps Secrets Vault Plugin+ Monitor io.jenkins.plugins:thycotic-devops-secrets-vault
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 0.4%
Jenkins Thycotic DevOps Secrets Vault Plugin 1.0.0 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Jenkins Project · Jenkins Thycotic DevOps Secrets Vault Plugin