CVE-2022-38663

—

CVSS 3.1

6.5 medium

EPSS

<1%p58

Published

Aug 23, 2022 (Aug 23, 2022)

Modified

Jun 17, 2026

Description

Jenkins Git Plugin 4.11.4 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log provided by the Git Username and Password (`gitUsernamePassword`) credentials binding.

Vendors: jenkins
Products: git
Weakness: CWE-522
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.