CVE-2024-9453
Fixed in a distro release EPSS <1%CVSS 6.5
A vulnerability was found in Red Hat OpenShift Jenkins. The bearer token is not obfuscated in the logs and potentially carries a high risk if those logs are centralized when collected. The token is typically valid for one year. This flaw allows a malicious user to jeopardize the environment if they have access to sensitive information.
Products: Jenkins openshift-sync-plugin, Red Hat OpenShift Developer Tools and Services
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | jenkins-2 | 0 |
| Chainguard | jenkins-2.462 | 0 |
| Chainguard | jenkins-2.492 | 0 |
| Chainguard | jenkins-2.504 | 0 |
| Chainguard | jenkins-2.516 | 0 |
| Chainguard | jenkins-2.528 | 0 |
| Chainguard | jenkins-2.541 | no fix |
| Chainguard | jenkins-2.555 | no fix |
| Chainguard | jenkins-2.568 | no fix |
| Chainguard | jenkins-2.580 | no fix |
| Wolfi | jenkins-2 | 0 |