VULNERABILITY INTELLIGENCE

CVE-2024-47805

CVSS score7.5 HIGH

EPSS probability0.59%

CISA KEVNot currently listed

Published2024-10-02

Last modified2026-06-17

Description

Jenkins Credentials Plugin 1380.va_435002fa_924 and earlier, except 1371.1373.v4eb_fa_b_7161e9, does not redact encrypted values of credentials using the `SecretBytes` type when accessing item `config.xml` via REST API or CLI.