First published: Wed Apr 12 2023(Updated: )
Jenkins Azure Key Vault Plugin 187.va_cd5fecd198a_ and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled.
Credit: jenkinsci-cert@googlegroups.com
Affected Software | Affected Version | How to fix |
---|---|---|
Jenkins Azure Key Vault | <=187.va_cd5fecd198a |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.