CVE-2020-2143

MEDIUM

Jenkins Logstash Plugin < 2.3.1 - Cleartext Transmission of Sensitive Credentials

Title source: llm
STIX 2.1

Description

Jenkins Logstash Plugin 2.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.

References (2)

Core 2
Core References
Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2020/03/09/1

Scores

CVSS v3 5.3
EPSS 0.0003
EPSS Percentile 7.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-319
Status published
Products (2)
jenkins/logstash < 2.3.1
org.jenkins-ci.plugins/logstash 0 - 2.3.2Maven
Published Mar 09, 2020
Tracked Since Feb 18, 2026