CVE-2023-33000

HIGH

Jenkins Ns-nd Integration Performance... - Insufficiently Protected Credentials

Title source: rule

Description

Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.149 and earlier does not mask credentials displayed on the configuration form, increasing the potential for attackers to observe and capture them.

Scores

CVSS v3 7.5
EPSS 0.0024
EPSS Percentile 46.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-522
Status published

Affected Products (2)

jenkins/ns-nd_integration_performance_publisher < 4.8.0.149
io.jenkins.plugins/cavisson-ns-nd-integration < 4.11.0.48Maven

Timeline

Published May 16, 2023
Tracked Since Feb 18, 2026