-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| com.veracode.jenkins:veracode-scan | maven | < 23.3.19.0 | 23.3.19.0 |
JavaJavaOngoing coverage of React2Shell
Miggo AIRoot Cause AnalysisThe vulnerability stems from proxy credentials being logged in job outputs when: 1) Proxy is configured 2) Debug logging is enabled. The most likely candidates are functions handling proxy configuration serialization and scan argument construction. ScanUtil.buildScanArguments is a high-confidence candidate as it would directly handle credential-containing arguments. VeracodeScanBuilder.perform is medium confidence as the main execution entry point that would coordinate logging. The patch (23.3.19.0) likely added credential masking in these areas.