← Volver a CVEs
CVE-2024-28154
MEDIUM6.5
Descripcion
Jenkins MQ Notifier Plugin 1.4.0 and earlier logs potentially sensitive build parameters as part of debug information in build logs by default.
Detalles CVE
Puntuacion CVSS v3.16.5
SeveridadMEDIUM
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosLOW
Interaccion usuarioNONE
Publicado3/6/2024
Ultima modificacion3/27/2025
Fuentenvd
Avistamientos honeypot0
Productos afectados
jenkins:mq_notifier
Debilidades (CWE)
CWE-532
Referencias
http://www.openwall.com/lists/oss-security/2024/03/06/3(jenkinsci-cert@googlegroups.com)
https://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3180(jenkinsci-cert@googlegroups.com)
http://www.openwall.com/lists/oss-security/2024/03/06/3(af854a3a-2127-422b-91ae-364da2661108)
https://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3180(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.