~ / search / GHSA-xj4w-r6gr-x5qm

GHSA-xj4w-r6gr-x5qm

Project Inheritance Plugin showed secret environment variables defined in Mask Passwords Plugin

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-10407

Packages

EcosystemPackageAffectedFixed in
Maven hudson.plugins:project-inheritance < 19.08.02 19.08.02

Details

As written in the advisory (Markdown source, shown as plain text).

Jenkins Project Inheritance Plugin 19.08.02 and earlier displayed a list of environment variables passed to a build without masking sensitive variables contributed by the Mask Passwords Plugin.

References

External links from the advisory. They lead to third-party sites.