CVE-2024-39460

NVD	https://nvd.nist.gov/vuln/detail/CVE-2024-39460
CWE	https://cwe.mitre.org/data/definitions/532.html

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-39460

CWE

https://cwe.mitre.org/data/definitions/532.html

Jenkins Bitbucket Branch Source Plugin 886.v44cf5e4ecec5 and earlier prints the Bitbucket OAuth access token as part of the Bitbucket URL in the build log in some cases.

Weakness

The product writes sensitive information to a log file.

Potential Mitigations

https://cwe.mitre.org/data/definitions/215.html

References

http://www.openwall.com/lists/oss-security/2024/06/26/2
https://www.jenkins.io/security/advisory/2024-06-26/#SECURITY-3363
http://www.openwall.com/lists/oss-security/2024/06/26/2
https://www.jenkins.io/security/advisory/2024-06-26/#SECURITY-3363

Insertion of Sensitive Information into Log File

Weakness

Potential Mitigations

Related Attack Patterns

References