Description
Jenkins Configuration as Code Plugin 1.20 and earlier did not treat the proxy password as a secret to be masked when logging or encrypted for export.
Remediation
References
http://www.openwall.com/lists/oss-security/2019/07/31/1
https://jenkins.io/security/advisory/2019-07-31/#SECURITY-1303
Related Vulnerabilities
CVE-2020-36282 Vulnerability in maven package com.rabbitmq.jms:rabbitmq-jms
CVE-2023-39156 Vulnerability in maven package org.jenkins-ci.plugins:bazaar
CVE-2023-42399 Vulnerability in npm package jodit
CVE-2021-27405 Vulnerability in npm package @progfay/scrapbox-parser
CVE-2022-25858 Vulnerability in maven package org.webjars.npm:terser