-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:sqlplus-script-runner | maven | < 2.0.13 | 2.0.13 |
JavaJavaMiggo AIRoot Cause AnalysisThe vulnerability stems from unredacted password exposure in build logs during sqlplus command execution. The execute method would logically be responsible for constructing the command line (including sensitive parameters) and logging the invocation. Jenkins plugin security fixes for credential leakage typically involve modifying command logging mechanisms in execution handlers. The advisory explicitly states the flaw was corrected by stopping password logging, strongly implicating the command execution/logging function as the vulnerable component.
Ongoing coverage of React2Shell