CVE Vulnerabilities

CVE-2019-10358

Insertion of Sensitive Information into Log File

Published: Jul 31, 2019 | Modified: Nov 21, 2024
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Jenkins Maven Integration Plugin 3.3 and earlier did not apply build log decorators to module builds, potentially revealing sensitive build variables in the build log.

Weakness

The product writes sensitive information to a log file.

Affected Software

Name Vendor Start Version End Version
Maven Jenkins * 3.3 (including)

Potential Mitigations

References