Veracode Scan Jenkins Plugin before 23.3.19.0, when the "Connect using proxy" option is enabled and configured with proxy credentials and when the Jenkins global system setting debug is enabled and when a scan is configured for remote agent jobs, allows users (with access to view the job log) to discover proxy credentials.
References
| Link | Resource |
|---|---|
| https://docs.veracode.com/updates/r/c_all_int#veracode-jenkins-plugin-233190 | Release Notes |
| https://docs.veracode.com/updates/r/c_all_int#veracode-jenkins-plugin-233190 | Release Notes |
| https://veracode.com | Vendor Advisory |
| https://veracode.com | Vendor Advisory |
Configurations
History
19 Feb 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://docs.veracode.com/updates/r/c_all_int#veracode-jenkins-plugin-233190 - Release Notes | |
| References | () https://veracode.com - Vendor Advisory |
05 Apr 2023, 01:54
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:veracode:veracode:*:*:*:*:*:jenkins:*:* | |
| References | (MISC) https://docs.veracode.com/updates/r/c_all_int#veracode-jenkins-plugin-233190 - Release Notes | |
| References | (MISC) https://veracode.com - Vendor Advisory | |
| First Time |
Veracode
Veracode veracode |
Information
Published : 2023-03-28 20:15
Updated : 2025-02-19 19:15
NVD link : CVE-2023-25721
Mitre link : CVE-2023-25721
JSON object : View
Products Affected
veracode
- veracode
CWE