medium6.5
CVE-2019-10407
Project Inheritance Plugin showed secret environment variables defined in Mask Passwords Plugin
Impact
Jenkins Project Inheritance Plugin 19.08.02 and earlier displayed a list of environment variables passed to a build without masking sensitive variables contributed by the Mask Passwords Plugin.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | hudson.plugins:project-inheritance | <= 19.08.01 | 19.08.02 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Project Inheritance | through 2.0.0 |