-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:ec2 | maven | <= 1.43 | 1.44 |
The GitHub commit diff (78c3c49) shows a direct modification to the logging statement in EC2UnixLauncher.java. The original code contained a line logging key.getKeyMaterial().substring(0,160), which exposed the beginning of the private key. This matches the CVE description about leaking private key fragments in logs. The patched version removed this sensitive output, confirming this was the vulnerable code path.
A Semantic Attack on Google Gemini - Read the Latest Research