-
CVSS Score
-The analysis focused on identifying functions that were modified to address the vulnerability related to the disclosure of encrypted secrets in agent and view configurations. The patches indicate that the primary issue was the lack of proper redaction of sensitive information for users without the necessary configure permissions. The identified functions are directly related to handling configuration data and were modified to enhance security by redacting sensitive information.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.main:jenkins-core | maven | >= 2.493, < 2.500 | 2.500 |
| org.jenkins-ci.main:jenkins-core | maven | < 2.492.2 | 2.492.2 |