CVE-2023-40339 - Vulnerability Details

Vendors	Products
Jenkins	Config File Provider
Jenkins Project	Jenkins Config File Provider Plugin
Redhat	Ocp Tools

Package	CPE	Advisory	Released Date
OCP-Tools-4.12-RHEL-8
jenkins-2-plugins-0:4.12.1706515741-1.el8	cpe:/a:redhat:ocp_tools:4.12::el8	RHSA-2024:0778	2024-02-12T00:00:00Z
OCP-Tools-4.14-RHEL-8
jenkins-2-plugins-0:4.14.1706516441-1.el8	cpe:/a:redhat:ocp_tools:4.14::el8	RHSA-2024:0777	2024-02-12T00:00:00Z

Link	Providers
http://www.openwall.com/lists/oss-security/2023/08/16/3
https://nvd.nist.gov/vuln/detail/CVE-2023-40339
https://www.cve.org/CVERecord?id=CVE-2023-40339
https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3090

Type	Values Removed	Values Added
First Time appeared		Jenkins Project Jenkins Project jenkins Config File Provider Plugin
CPEs		cpe:2.3:a:jenkins_project:jenkins_config_file_provider_plugin::::::::
Vendors & Products		Jenkins Project Jenkins Project jenkins Config File Provider Plugin
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-40339", "assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b", "state": "PUBLISHED", "assignerShortName": "jenkins", "dateReserved": "2023-08-14T16:02:56.435Z", "datePublished": "2023-08-16T14:32:51.314Z", "dateUpdated": "2024-10-08T17:49:36.202Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "product": "Jenkins Config File Provider Plugin", "vendor": "Jenkins Project", "versions": [{"lessThan": "*", "status": "unaffected", "version": "953.v0432a_802e4d2", "versionType": "maven"}, {"status": "unaffected", "version": "951.953.vdfc5f6e2dcc4"}]}], "descriptions": [{"lang": "en", "value": "Jenkins Config File Provider Plugin 952.va_544a_6234b_46 and earlier does not mask (i.e., replace with asterisks) credentials specified in configuration files when they're written to the build log."}], "providerMetadata": {"orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b", "shortName": "jenkins", "dateUpdated": "2023-10-24T12:51:22.838Z"}, "references": [{"name": "Jenkins Security Advisory 2023-08-16", "tags": ["vendor-advisory"], "url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3090"}, {"url": "http://www.openwall.com/lists/oss-security/2023/08/16/3"}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T18:31:53.808Z"}, "title": "CVE Program Container", "references": [{"name": "Jenkins Security Advisory 2023-08-16", "tags": ["vendor-advisory", "x_transferred"], "url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3090"}, {"url": "http://www.openwall.com/lists/oss-security/2023/08/16/3", "tags": ["x_transferred"]}]}, {"affected": [{"vendor": "jenkins_project", "product": "jenkins_config_file_provider_plugin", "cpes": ["cpe:2.3:a:jenkins_project:jenkins_config_file_provider_plugin:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "953.v0432a_802e4d2", "status": "unaffected", "lessThan": "*", "versionType": "custom"}, {"version": "951.953.vdfc5f6e2dcc4", "status": "unaffected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-08T17:42:10.495502Z", "id": "CVE-2023-40339", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-08T17:49:36.202Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-40339 (string)

assignerOrgId : 39769cd5-e6e2-4dc8-927e-97b3aa056f5b (string)

state : PUBLISHED (string)

assignerShortName : jenkins (string)

dateReserved : 2023-08-14T16:02:56.435Z (string)

datePublished : 2023-08-16T14:32:51.314Z (string)

dateUpdated : 2024-10-08T17:49:36.202Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : affected (string)

product : Jenkins Config File Provider Plugin (string)

vendor : Jenkins Project (string)

versions : [ »

0 : { »

lessThan : * (string)

status : unaffected (string)

version : 953.v0432a_802e4d2 (string)

versionType : maven (string)

}

1 : { »

status : unaffected (string)

version : 951.953.vdfc5f6e2dcc4 (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Jenkins Config File Provider Plugin 952.va_544a_6234b_46 and earlier does not mask (i.e., replace with asterisks) credentials specified in configuration files when they're written to the build log. (string)

}

]

providerMetadata : { »

orgId : 39769cd5-e6e2-4dc8-927e-97b3aa056f5b (string)

shortName : jenkins (string)

dateUpdated : 2023-10-24T12:51:22.838Z (string)

}

references : [ »

0 : { »

name : Jenkins Security Advisory 2023-08-16 (string)

tags : [ »

0 : vendor-advisory (string)

]

url : https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3090 (string)

}

1 : { »

url : http://www.openwall.com/lists/oss-security/2023/08/16/3 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T18:31:53.808Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : Jenkins Security Advisory 2023-08-16 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_transferred (string)

]

url : https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3090 (string)

}

1 : { »

url : http://www.openwall.com/lists/oss-security/2023/08/16/3 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

affected : [ »

0 : { »

vendor : jenkins_project (string)

product : jenkins_config_file_provider_plugin (string)

cpes : [ »

0 : cpe:2.3:a:jenkins_project:jenkins_config_file_provider_plugin:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 953.v0432a_802e4d2 (string)

status : unaffected (string)

lessThan : * (string)

versionType : custom (string)

}

1 : { »

version : 951.953.vdfc5f6e2dcc4 (string)

status : unaffected (string)

}

]

}

]

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-10-08T17:42:10.495502Z (string)

id : CVE-2023-40339 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-08T17:49:36.202Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3090", "name": "Jenkins Security Advisory 2023-08-16", "tags": ["vendor-advisory", "x_transferred"]}, {"url": "http://www.openwall.com/lists/oss-security/2023/08/16/3", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T18:31:53.808Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-40339", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-10-08T17:42:10.495502Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:jenkins_project:jenkins_config_file_provider_plugin:*:*:*:*:*:*:*:*"], "vendor": "jenkins_project", "product": "jenkins_config_file_provider_plugin", "versions": [{"status": "unaffected", "version": "953.v0432a_802e4d2", "lessThan": "*", "versionType": "custom"}, {"status": "unaffected", "version": "951.953.vdfc5f6e2dcc4"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-08T17:47:56.712Z"}}], "cna": {"affected": [{"vendor": "Jenkins Project", "product": "Jenkins Config File Provider Plugin", "versions": [{"status": "unaffected", "version": "953.v0432a_802e4d2", "lessThan": "*", "versionType": "maven"}, {"status": "unaffected", "version": "951.953.vdfc5f6e2dcc4"}], "defaultStatus": "affected"}], "references": [{"url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3090", "name": "Jenkins Security Advisory 2023-08-16", "tags": ["vendor-advisory"]}, {"url": "http://www.openwall.com/lists/oss-security/2023/08/16/3"}], "descriptions": [{"lang": "en", "value": "Jenkins Config File Provider Plugin 952.va_544a_6234b_46 and earlier does not mask (i.e., replace with asterisks) credentials specified in configuration files when they're written to the build log."}], "providerMetadata": {"orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b", "shortName": "jenkins", "dateUpdated": "2023-10-24T12:51:22.838Z"}}}, "cveMetadata": {"cveId": "CVE-2023-40339", "state": "PUBLISHED", "dateUpdated": "2024-10-08T17:49:36.202Z", "dateReserved": "2023-08-14T16:02:56.435Z", "assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b", "datePublished": "2023-08-16T14:32:51.314Z", "assignerShortName": "jenkins"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3090 (string)

name : Jenkins Security Advisory 2023-08-16 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_transferred (string)

]

}

1 : { »

url : http://www.openwall.com/lists/oss-security/2023/08/16/3 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T18:31:53.808Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-40339 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-10-08T17:42:10.495502Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:a:jenkins_project:jenkins_config_file_provider_plugin:*:*:*:*:*:*:*:* (string)

]

vendor : jenkins_project (string)

product : jenkins_config_file_provider_plugin (string)

versions : [ »

0 : { »

status : unaffected (string)

version : 953.v0432a_802e4d2 (string)

lessThan : * (string)

versionType : custom (string)

}

1 : { »

status : unaffected (string)

version : 951.953.vdfc5f6e2dcc4 (string)

}

]

defaultStatus : unknown (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-08T17:47:56.712Z (string)

}

]

cna : { »

affected : [ »

0 : { »

vendor : Jenkins Project (string)

product : Jenkins Config File Provider Plugin (string)

versions : [ »

0 : { »

status : unaffected (string)

version : 953.v0432a_802e4d2 (string)

lessThan : * (string)

versionType : maven (string)

}

1 : { »

status : unaffected (string)

version : 951.953.vdfc5f6e2dcc4 (string)

}

]

defaultStatus : affected (string)

}

]

references : [ »

0 : { »

url : https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3090 (string)

name : Jenkins Security Advisory 2023-08-16 (string)

tags : [ »

0 : vendor-advisory (string)

]

}

1 : { »

url : http://www.openwall.com/lists/oss-security/2023/08/16/3 (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Jenkins Config File Provider Plugin 952.va_544a_6234b_46 and earlier does not mask (i.e., replace with asterisks) credentials specified in configuration files when they're written to the build log. (string)

}

]

providerMetadata : { »

orgId : 39769cd5-e6e2-4dc8-927e-97b3aa056f5b (string)

shortName : jenkins (string)

dateUpdated : 2023-10-24T12:51:22.838Z (string)

}

cveMetadata : { »

cveId : CVE-2023-40339 (string)

state : PUBLISHED (string)

dateUpdated : 2024-10-08T17:49:36.202Z (string)

dateReserved : 2023-08-14T16:02:56.435Z (string)

assignerOrgId : 39769cd5-e6e2-4dc8-927e-97b3aa056f5b (string)

datePublished : 2023-08-16T14:32:51.314Z (string)

assignerShortName : jenkins (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:jenkins:config_file_provider:*:*:*:*:*:jenkins:*:*", "matchCriteriaId": "F0F8F4AC-9087-47EF-890B-CBEB311E4E2D", "versionEndIncluding": "952.va_544a_6234b_46", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Jenkins Config File Provider Plugin 952.va_544a_6234b_46 and earlier does not mask (i.e., replace with asterisks) credentials specified in configuration files when they're written to the build log."}], "id": "CVE-2023-40339", "lastModified": "2024-11-21T08:19:15.080", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-08-16T15:15:11.547", "references": [{"source": "jenkinsci-cert@googlegroups.com", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/08/16/3"}, {"source": "jenkinsci-cert@googlegroups.com", "tags": ["Vendor Advisory"], "url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3090"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2023/08/16/3"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3090"}], "sourceIdentifier": "jenkinsci-cert@googlegroups.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:jenkins:config_file_provider:*:*:*:*:*:jenkins:*:* (string)

matchCriteriaId : F0F8F4AC-9087-47EF-890B-CBEB311E4E2D (string)

versionEndIncluding : 952.va_544a_6234b_46 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Jenkins Config File Provider Plugin 952.va_544a_6234b_46 and earlier does not mask (i.e., replace with asterisks) credentials specified in configuration files when they're written to the build log. (string)

}

]

id : CVE-2023-40339 (string)

lastModified : 2024-11-21T08:19:15.080 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-08-16T15:15:11.547 (string)

references : [ »

0 : { »

source : jenkinsci-cert@googlegroups.com (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/08/16/3 (string)

}

1 : { »

source : jenkinsci-cert@googlegroups.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3090 (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

1 : Third Party Advisory (string)

]

url : http://www.openwall.com/lists/oss-security/2023/08/16/3 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3090 (string)

}

]

sourceIdentifier : jenkinsci-cert@googlegroups.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Show plain JSON

{"affected_release": [{"advisory": "RHSA-2024:0778", "cpe": "cpe:/a:redhat:ocp_tools:4.12::el8", "package": "jenkins-2-plugins-0:4.12.1706515741-1.el8", "product_name": "OCP-Tools-4.12-RHEL-8", "release_date": "2024-02-12T00:00:00Z"}, {"advisory": "RHSA-2024:0777", "cpe": "cpe:/a:redhat:ocp_tools:4.14::el8", "package": "jenkins-2-plugins-0:4.14.1706516441-1.el8", "product_name": "OCP-Tools-4.14-RHEL-8", "release_date": "2024-02-12T00:00:00Z"}], "bugzilla": {"description": "jenkins-plugins: config-file-provider: Improper masking of credentials in Config File Provider Plugin", "id": "2232423", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2232423"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "status": "verified"}, "details": ["Jenkins Config File Provider Plugin 952.va_544a_6234b_46 and earlier does not mask (i.e., replace with asterisks) credentials specified in configuration files when they're written to the build log.", "A flaw was found in the Config File Provider Jenkins Plugin. Affected versions of this plugin do not mask (replace with asterisks) credentials specified in configuration files when they're written to the build log."], "name": "CVE-2023-40339", "package_state": [{"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Out of support scope", "package_name": "jenkins-2-plugins", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Affected", "package_name": "jenkins-2-plugins", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2023-08-16T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2023-40339\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-40339\nhttps://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3090"], "threat_severity": "Moderate"}

{

affected_release : [ »

0 : { »

advisory : RHSA-2024:0778 (string)

cpe : cpe:/a:redhat:ocp_tools:4.12::el8 (string)

package : jenkins-2-plugins-0:4.12.1706515741-1.el8 (string)

product_name : OCP-Tools-4.12-RHEL-8 (string)

release_date : 2024-02-12T00:00:00Z (string)

}

1 : { »

advisory : RHSA-2024:0777 (string)

cpe : cpe:/a:redhat:ocp_tools:4.14::el8 (string)

package : jenkins-2-plugins-0:4.14.1706516441-1.el8 (string)

product_name : OCP-Tools-4.14-RHEL-8 (string)

release_date : 2024-02-12T00:00:00Z (string)

}

]

bugzilla : { »

description : jenkins-plugins: config-file-provider: Improper masking of credentials in Config File Provider Plugin (string)

id : 2232423 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2232423 (string)

}

csaw : false (boolean)

cvss3 : { »

cvss3_base_score : 7.5 (string)

cvss3_scoring_vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

status : verified (string)

}

details : [ »

0 : Jenkins Config File Provider Plugin 952.va_544a_6234b_46 and earlier does not mask (i.e., replace with asterisks) credentials specified in configuration files when they're written to the build log. (string)

1 : A flaw was found in the Config File Provider Jenkins Plugin. Affected versions of this plugin do not mask (replace with asterisks) credentials specified in configuration files when they're written to the build log. (string)

]

name : CVE-2023-40339 (string)

package_state : [ »

0 : { »

cpe : cpe:/a:redhat:openshift:3.11 (string)

fix_state : Out of support scope (string)

package_name : jenkins-2-plugins (string)

product_name : Red Hat OpenShift Container Platform 3.11 (string)

}

1 : { »

cpe : cpe:/a:redhat:openshift:4 (string)

fix_state : Affected (string)

package_name : jenkins-2-plugins (string)

product_name : Red Hat OpenShift Container Platform 4 (string)

}

]

public_date : 2023-08-16T00:00:00Z (string)

references : [ »

0 : https://www.cve.org/CVERecord?id=CVE-2023-40339 https://nvd.nist.gov/vuln/detail/CVE-2023-40339 https://www.jenkins.io/security/advisory/2023-08-16/#SECURITY-3090 (string)

]

threat_severity : Moderate (string)

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object