~ / search / GHSA-w7fv-7j46-wwrv

GHSA-w7fv-7j46-wwrv

Jenkins Amazon EC2 Plugin leaked beginning of private key in system log

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-10364

Packages

EcosystemPackageAffectedFixed in
Maven org.jenkins-ci.plugins:ec2 < 1.44 1.44

Details

As written in the advisory (Markdown source, shown as plain text).

Jenkins Amazon EC2 Plugin printed a log message that contained the beginning of the private key to the Jenkins system log. The log message no longer includes the beginning of the private key.

References

External links from the advisory. They lead to third-party sites.