CVE-2023-39155

MediumCVSS 5.3

Published: 26/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

34th percentile - higher than 34% of all known CVEs

Summary

Jenkins Chef Identity Plugin version 2.0.3 and earlier does not mask the user.pem key form field, increasing the risk of attackers observing and capturing it.

Risk Assessment

The lack of masking for the user key may lead to the exposure of sensitive data, posing a security threat to the system.

Recommendation

It is recommended to update the plugin to the latest version to ensure proper security for the user.pem key.

Original NVD description (English source)

Jenkins Chef Identity Plugin 2.0.3 and earlier does not mask the user.pem key form field, increasing the potential for attackers to observe and capture it.