CVSS 3.1
5.3 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NCVE-2023-41934
Medium (5.3) in jenkins pipeline maven integration. EPSS 0.7% chance of exploitation in the next 30 days. Fixed in org.jenkins-ci.plugins:pipeline-maven 1331.v003efa_fd6e81.
Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier does not properly mask (i.e., replace with asterisks) usernames of credentials specified in custom Maven settings in Pipeline build logs if "Treat username as secret" is checked.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
- CWE
- CWE-532
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jenkins:pipeline_maven_integration
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-9v8g-f9mq-739g | Maven | org.jenkins-ci.plugins:pipeline-maven | <1331.v003efa_fd6e81 | 1331.v003efa_fd6e81 |