CVE-2023-32983

MEDIUM

5.3

Description

Jenkins Ansible Plugin 204.v8191fd551eb_f and earlier does not mask extra variables displayed on the configuration form, increasing the potential for attackers to observe and capture them.

CVE Details

CVSS v3.1 Score5.3

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published5/16/2023

Last Modified1/23/2025

Sourcenvd

Honeypot Sightings0

Affected Products

jenkins:ansible

Weaknesses (CWE)

CWE-312CWE-312

References

https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3017(jenkinsci-cert@googlegroups.com)

https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3017(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.