CVE-2019-10358

CWE-532 — Log File Information Exposure5 documents5 sources
Severity
6.5MEDIUM
EPSS
0.1%
top 66.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Jenkins MavenJenkins Project Jenkins Maven Integration Plugin
Timeline
PublishedJul 31
Latest updateMay 24

Description

Jenkins Maven Integration Plugin 3.3 and earlier did not apply build log decorators to module builds, potentially revealing sensitive build variables in the build log.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages3 packages

▶NVDjenkins/maven3.3

🔴Vulnerability Details

3
OSV
Maven Integration Plugin did not mask sensitive values in module build logs↗2022-05-24
▶
GHSA
Maven Integration Plugin did not mask sensitive values in module build logs↗2022-05-24
▶
CVEList
CVE-2019-10358: Jenkins Maven Integration Plugin 3↗2019-07-31
▶

📋Vendor Advisories

1
Jenkins
Jenkins Security Advisory 2019-07-31↗2019-07-31
▶
CVE-2019-10358 (MEDIUM CVSS 6.5) | Jenkins Maven Integration Plugin 3. | cvebase.io