CVE-2023-30514 Information

Description

Jenkins Azure Key Vault Plugin 187.va_cd5fecd198a_ and earlier does not properly mask (i.e. replace with asterisks) credentials in the build log when push mode for durable task logging is enabled.

Reference

https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3075

Share on: