CVE-2024-47805
HIGHJenkins Credentials Plugin <1380.va - Info Disclosure
Title source: llmDescription
Jenkins Credentials Plugin 1380.va_435002fa_924 and earlier, except 1371.1373.v4eb_fa_b_7161e9, does not redact encrypted values of credentials using the `SecretBytes` type when accessing item `config.xml` via REST API or CLI.
Scores
CVSS v3
7.5
EPSS
0.0024
EPSS Percentile
47.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Classification
CWE
CWE-522
Status
published
Affected Products (2)
jenkins/credentials
< 1371.1373.v4eb_fa_b_7161e9
org.jenkins-ci.plugins/credentials
< 1381.v2c3aMaven
Timeline
Published
Oct 02, 2024
Tracked Since
Feb 18, 2026