jenkins configuration-as-code CVE-2019-10367 is a vulnerability in Jenkins Configuration As Code
Published on August 7, 2019

Due to an incomplete fix of CVE-2019-10343, Jenkins Configuration as Code Plugin 1.26 and earlier did not properly apply masking to some values expected to be hidden when logging the configuration being applied.

NVD


Products Associated with CVE-2019-10367

Want to know whenever a new CVE is published for Jenkins Configuration As Code? stack.watch will email you.

 

Affected Versions

Jenkins project Jenkins Configuration as Code Plugin Version 1.26 and earlier is affected by CVE-2019-10367

Exploit Probability

EPSS
0.02%
Percentile
5.49%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.