medium6.5
CVE-2023-46653
Jenkins lambdatest-automation Plugin may expose Credentials access token
Impact
Jenkins lambdatest-automation Plugin 1.20.10 and earlier logs LAMBDATEST Credentials access token at the INFO level. This can result in accidental exposure of the token through the default system log. lambdatest-automation Plugin 1.21.0 no longer logs LAMBDATEST Credentials access token.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.jenkins-ci.plugins:lambdatest-automation | < 1.21.0 | 1.21.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Lambdatest-Automation | before 1.21.0 |