CVE Catalog
CVE-2023-39152
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.64%
46th percentile - higher than 46% of all known CVEs
Summary
The Gradle Plugin for Jenkins version 2.8 has an always-incorrect control flow implementation that may result in credentials not being masked (i.e., not replaced with asterisks) in the build log under certain circumstances.
Risk Assessment
The lack of masking credentials in build logs may lead to the exposure of sensitive information, posing a security risk to the organization.
Recommendation
It is recommended to update the Gradle Plugin to the latest version to ensure proper masking of credentials in build logs.
Original NVD description (English source)
Always-incorrect control flow implementation in Jenkins Gradle Plugin 2.8 may result in credentials not being masked (i.e., replaced with asterisks) in the build log in some circumstances.