CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2023-25721
Medium (6.5) in veracode veracode. EPSS 0.6% chance of exploitation in the next 30 days. Fixed in com.veracode.jenkins:veracode-scan 23.3.19.0.
Veracode Scan Jenkins Plugin before 23.3.19.0, when the "Connect using proxy" option is enabled and configured with proxy credentials and when the Jenkins global system setting debug is enabled and when a scan is configured for remote agent jobs, allows users (with access to view the job log) to discover proxy credentials.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
- CWE
- CWE-532
- Published
- Modified
- Record from
- the NVD, synced
Affected
- veracode:veracode
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-c4jr-vjm4-27hq | Maven | com.veracode.jenkins:veracode-scan | <23.3.19.0 | 23.3.19.0 |