3.1
Low
CVE-2024-39458 When Jenkins Structs Plugin 337.v1b_04ea_4df7c8 and earlier fails to configure a build step, it logs a warning message…
Description
When Jenkins Structs Plugin 337.v1b_04ea_4df7c8 and earlier fails to configure a build step, it logs a warning message containing diagnostic information that may contain secrets passed as step parameters, potentially resulting in accidental exposure of secrets through the default system log.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Structs Plugin | Versions not published |
References
- Jenkins Security Advisory 2024-06-26 www.jenkins.io
- www.openwall.com www.openwall.com
Timeline
- Published
- Last modified