Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2023-25721

Good to know:

icon

Date: March 27, 2023

Veracode Scan Jenkins Plugin before 23.3.19.0, when the "Connect using proxy" option is enabled and configured with proxy credentials and when the Jenkins global system setting debug is enabled and when a scan is configured for remote agent jobs, allows users (with access to view the job log) to discover proxy credentials.

Language: Java

Severity Score

Related Resources (6)

https://nvd.nist.gov/vuln/detail/CVE-2023-25721
https://github.com/jenkinsci/veracode-scan-plugin
https://docs.veracode.com/updates/r/c_all_int#veracode-jenkins-plugin-233190
https://community.veracode.com/s/spotlight/frequently-asked-questions-for-cve-2023-25721-and-cve-2023-25722-MCFT34TH6OGRFR7F7JGDQQP4TNZE
https://veracode.com
https://www.mend.io/vulnerability-database/CVE-2023-25721

Severity Score

Weakness Type (CWE)

Information Exposure Through Log Files

CWE-532

Insufficient Information

NVD-CWE-noinfo

Top Fix

icon

Upgrade Version

Upgrade to version com.veracode.jenkins:veracode-scan:23.3.19.0

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us