CVE-2023-50777: Medium severity jenkins vulnerability
Published Dec 13, 2023
·Updated
Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier does not mask PaaSLane authentication tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
Affected Software
2 affected components
Jenkins Paaslane Estimate Jenkins<=1.0.4
maven/com.cloudtp.jenkins:paaslane-estimate<=1.0.4
Event History
Dec 13, 2023
CVE Published
via MITRE·05:30 PM
Data Sourced
via MITRE·05:30 PM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Advisory Published
06:31 PM
Frequently Asked Questions
1
What is the severity of CVE-2023-50777?
CVE-2023-50777 is classified as a moderate severity vulnerability due to the exposure of authentication tokens.
2
How do I fix CVE-2023-50777?
To fix CVE-2023-50777, upgrade the Jenkins PaaSLane Estimate Plugin to version 1.0.5 or later where the issue is resolved.
3
What does CVE-2023-50777 affect?
CVE-2023-50777 affects Jenkins PaaSLane Estimate Plugin versions 1.0.4 and earlier.
4
What are the risks associated with CVE-2023-50777?
The risks of CVE-2023-50777 include unauthorized access to sensitive PaaSLane authentication tokens by attackers.
5
When was CVE-2023-50777 disclosed?
CVE-2023-50777 was disclosed on December 13, 2023.