CVE-2020-2182: Insufficiently Protected Credentials

May 24, 2022 (updated June 24, 2022)

Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a $ character in some circumstances.

References

www.openwall.com/lists/oss-security/2020/05/06/3
github.com/advisories/GHSA-7ff8-qfwx-8gx5
jenkins.io/security/advisory/2020-05-06/
nvd.nist.gov/vuln/detail/CVE-2020-2182

Code Behaviors & Features

Detect and mitigate CVE-2020-2182 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →