Vulnerability Details CVE-2024-47805
Jenkins Credentials Plugin 1380.va_435002fa_924 and earlier, except 1371.1373.v4eb_fa_b_7161e9, does not redact encrypted values of credentials using the `SecretBytes` type when accessing item `config.xml` via REST API or CLI.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.3%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2024-47805
-
cpe:2.3:a:jenkins:credentials:-
-
cpe:2.3:a:jenkins:credentials:1.0
-
cpe:2.3:a:jenkins:credentials:1.1
-
cpe:2.3:a:jenkins:credentials:1.10
-
cpe:2.3:a:jenkins:credentials:1.11
-
cpe:2.3:a:jenkins:credentials:1.12
-
cpe:2.3:a:jenkins:credentials:1.13
-
cpe:2.3:a:jenkins:credentials:1.14
-
cpe:2.3:a:jenkins:credentials:1.15
-
cpe:2.3:a:jenkins:credentials:1.16
-
cpe:2.3:a:jenkins:credentials:1.16.1
-
cpe:2.3:a:jenkins:credentials:1.17
-
cpe:2.3:a:jenkins:credentials:1.18
-
cpe:2.3:a:jenkins:credentials:1.19
-
cpe:2.3:a:jenkins:credentials:1.2
-
cpe:2.3:a:jenkins:credentials:1.20
-
cpe:2.3:a:jenkins:credentials:1.21
-
cpe:2.3:a:jenkins:credentials:1.22
-
cpe:2.3:a:jenkins:credentials:1.23
-
cpe:2.3:a:jenkins:credentials:1.24
-
cpe:2.3:a:jenkins:credentials:1.25
-
cpe:2.3:a:jenkins:credentials:1.26
-
cpe:2.3:a:jenkins:credentials:1.27
-
cpe:2.3:a:jenkins:credentials:1.28
-
cpe:2.3:a:jenkins:credentials:1.3
-
cpe:2.3:a:jenkins:credentials:1.3.1
-
cpe:2.3:a:jenkins:credentials:1.4
-
cpe:2.3:a:jenkins:credentials:1.5
-
cpe:2.3:a:jenkins:credentials:1.6
-
cpe:2.3:a:jenkins:credentials:1.7
-
cpe:2.3:a:jenkins:credentials:1.7.1
-
cpe:2.3:a:jenkins:credentials:1.7.2
-
cpe:2.3:a:jenkins:credentials:1.7.3
-
cpe:2.3:a:jenkins:credentials:1.7.4
-
cpe:2.3:a:jenkins:credentials:1.7.5
-
cpe:2.3:a:jenkins:credentials:1.7.6
-
cpe:2.3:a:jenkins:credentials:1.8
-
cpe:2.3:a:jenkins:credentials:1.8.1
-
cpe:2.3:a:jenkins:credentials:1.8.2
-
cpe:2.3:a:jenkins:credentials:1.8.3
-
cpe:2.3:a:jenkins:credentials:1.8.4
-
cpe:2.3:a:jenkins:credentials:1.9
-
cpe:2.3:a:jenkins:credentials:1.9.1
-
cpe:2.3:a:jenkins:credentials:1.9.2
-
cpe:2.3:a:jenkins:credentials:1.9.3
-
cpe:2.3:a:jenkins:credentials:1.9.4
-
cpe:2.3:a:jenkins:credentials:1055.v1346ba467ba1
-
cpe:2.3:a:jenkins:credentials:1061.vb_1fceb_58fa_18
-
cpe:2.3:a:jenkins:credentials:1074.1076.v39c30cecb_0e2
-
cpe:2.3:a:jenkins:credentials:1074.v60e6c29b_b_44b_
-
cpe:2.3:a:jenkins:credentials:1087.v16065d268466
-
cpe:2.3:a:jenkins:credentials:1105.vb_4e24a_c78b_81
-
cpe:2.3:a:jenkins:credentials:1111.v35a_307992395
-
cpe:2.3:a:jenkins:credentials:1112.vc87b_7a_3597f6
-
cpe:2.3:a:jenkins:credentials:1118.v320cd028cb_a_0
-
cpe:2.3:a:jenkins:credentials:1126.ve05618c41e62
-
cpe:2.3:a:jenkins:credentials:1129.vef26f5df883c
-
cpe:2.3:a:jenkins:credentials:1139.veb_9579fca_33b_
-
cpe:2.3:a:jenkins:credentials:1143.vb_e8b_b_ceee347
-
cpe:2.3:a:jenkins:credentials:1189.vf61b_a_5e2f62e
-
cpe:2.3:a:jenkins:credentials:1214.v1de940103927
-
cpe:2.3:a:jenkins:credentials:1371.vfee6b_095f0a_3
-
cpe:2.3:a:jenkins:credentials:2.0
-
cpe:2.3:a:jenkins:credentials:2.0.1
-
cpe:2.3:a:jenkins:credentials:2.0.2
-
cpe:2.3:a:jenkins:credentials:2.0.3
-
cpe:2.3:a:jenkins:credentials:2.0.4
-
cpe:2.3:a:jenkins:credentials:2.0.5
-
cpe:2.3:a:jenkins:credentials:2.0.6
-
cpe:2.3:a:jenkins:credentials:2.0.7
-
cpe:2.3:a:jenkins:credentials:2.1.0
-
cpe:2.3:a:jenkins:credentials:2.1.1
-
cpe:2.3:a:jenkins:credentials:2.1.10
-
cpe:2.3:a:jenkins:credentials:2.1.11
-
cpe:2.3:a:jenkins:credentials:2.1.12
-
cpe:2.3:a:jenkins:credentials:2.1.13
-
cpe:2.3:a:jenkins:credentials:2.1.14
-
cpe:2.3:a:jenkins:credentials:2.1.15
-
cpe:2.3:a:jenkins:credentials:2.1.16
-
cpe:2.3:a:jenkins:credentials:2.1.17
-
cpe:2.3:a:jenkins:credentials:2.1.18
-
cpe:2.3:a:jenkins:credentials:2.1.19
-
cpe:2.3:a:jenkins:credentials:2.1.2
-
cpe:2.3:a:jenkins:credentials:2.1.3
-
cpe:2.3:a:jenkins:credentials:2.1.4
-
cpe:2.3:a:jenkins:credentials:2.1.5
-
cpe:2.3:a:jenkins:credentials:2.1.6
-
cpe:2.3:a:jenkins:credentials:2.1.7
-
cpe:2.3:a:jenkins:credentials:2.1.8
-
cpe:2.3:a:jenkins:credentials:2.1.9
-
cpe:2.3:a:jenkins:credentials:2.2.0
-
cpe:2.3:a:jenkins:credentials:2.2.1
-
cpe:2.3:a:jenkins:credentials:2.3.0
-
cpe:2.3:a:jenkins:credentials:2.3.0.1
-
cpe:2.3:a:jenkins:credentials:2.3.1
-
cpe:2.3:a:jenkins:credentials:2.3.10
-
cpe:2.3:a:jenkins:credentials:2.3.11
-
cpe:2.3:a:jenkins:credentials:2.3.12
-
cpe:2.3:a:jenkins:credentials:2.3.13
-
cpe:2.3:a:jenkins:credentials:2.3.13.1
-
cpe:2.3:a:jenkins:credentials:2.3.14
-
cpe:2.3:a:jenkins:credentials:2.3.14.1
-
cpe:2.3:a:jenkins:credentials:2.3.15
-
cpe:2.3:a:jenkins:credentials:2.3.15.1
-
cpe:2.3:a:jenkins:credentials:2.3.16
-
cpe:2.3:a:jenkins:credentials:2.3.17
-
cpe:2.3:a:jenkins:credentials:2.3.18
-
cpe:2.3:a:jenkins:credentials:2.3.19
-
cpe:2.3:a:jenkins:credentials:2.3.2
-
cpe:2.3:a:jenkins:credentials:2.3.3
-
cpe:2.3:a:jenkins:credentials:2.3.4
-
cpe:2.3:a:jenkins:credentials:2.3.5
-
cpe:2.3:a:jenkins:credentials:2.3.6
-
cpe:2.3:a:jenkins:credentials:2.3.7
-
cpe:2.3:a:jenkins:credentials:2.3.7.1
-
cpe:2.3:a:jenkins:credentials:2.3.8
-
cpe:2.3:a:jenkins:credentials:2.3.9
-
cpe:2.3:a:jenkins:credentials:2.4
-
cpe:2.3:a:jenkins:credentials:2.4.0.1
-
cpe:2.3:a:jenkins:credentials:2.4.1
-
cpe:2.3:a:jenkins:credentials:2.5
-
cpe:2.3:a:jenkins:credentials:2.6
-
cpe:2.3:a:jenkins:credentials:2.6.1
-
cpe:2.3:a:jenkins:credentials:2.6.1.1
-
cpe:2.3:a:jenkins:credentials:2.6.2