CB
Product
Credentials Binding
8
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 5Low 0
Watch
Add Credentials Binding to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-2181 | 6.5 | May 6 | Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets in the build log when the build contains no build steps Affected: through 1.22 |
| CVE-2019-1010241 | 6.5 | Jul 19 | Jenkins Credentials Binding Plugin Jenkins 1.17 is affected by: CWE-257: Storing Passwords in a Recoverable Format Affected: 1.17 |
| CVE-2022-20616 | 4.3 | Jan 12 | Jenkins Credentials Binding Plugin 1.27 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read access to… Affected: through 1.27 |
| CVE-2020-2182 | 4.3 | May 6 | Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a `$` character in some circumstances Affected: through 1.22 |
| CVE-2018-1000057 | 4.3 | Feb 9 | Jenkins Credentials Binding Plugin 1.14 and earlier masks passwords it provides to build processes in their build logs Affected: through 1.14 |
Showing 5