Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-2633

Jenkins Code Dx Plugin 3.1.0 and earlier does not mask Code Dx server API keys displayed on the configuration form, increasing the potential for attackers to observe and capture them.

Published

2023-05-16T18:15:17.453

Last Modified

2024-11-21T07:58:58.287

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses

Type: Secondary
CWE-256
Type: Primary
CWE-522

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	jenkins	code_dx	≤ 3.1.0	Yes

References

https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3146 Vendor Advisory ([email protected])
https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3146 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)