CVE-2022-25187

Medium

Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle.

jenkins·CWE-212·Published 2022-02-15

CVSS

6.5

EPSS

0.01

KEV

Exploits

cve.orgen

110 chars

Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle.

NVDen

110 chars

Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle.

OSV.deven

199 chars

Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle. Support Core Plugin 2.79.1 adds a list of keywords whose associated values are redacted.

GHSAen

199 chars

Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle. Support Core Plugin 2.79.1 adds a list of keywords whose associated values are redacted.

NVDes

129 chars

Jenkins Support Core Plugin versiones 2.79 y anteriores, no redacta determinada información confidencial en el paquete de soporte

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.0	8.0	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N
3.1	Primary	NVD	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
3.1	Secondary	GHSA	6.5	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N