VULNERABILITY INTELLIGENCE

CVE-2023-2633

CVSS score4.3 MEDIUM
EPSS probability0.41%
CISA KEVNot currently listed
Published2023-05-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Jenkins Code Dx Plugin 3.1.0 and earlier does not mask Code Dx server API keys displayed on the configuration form, increasing the potential for attackers to observe and capture them.

Weakness classification

  • CWE-256: Plaintext Storage of a Password
  • CWE-522: Insufficiently Protected Credentials

Primary references