CVSS 3.1 Score 6.5 of 10 (medium)


Published Jul 26, 2023
Updated: Jul 31, 2023
CWE ID 670


CVE-2023-39152 is a vulnerability that affects the Jenkins Gradle Plugin 2.8. The vulnerability allows credentials to be exposed in the build log, instead of being masked with asterisks, under certain circumstances. The risk score for this vulnerability is 25, indicating a medium severity level. The exploitability score is 2.8, and the base score is 6.5. The impact of this vulnerability includes high confidentiality impact and no integrity impact or availability impact. The vulnerability requires low privileges to be exploited and does not require user interaction. This vulnerability poses a potential danger to organizations as it can lead to the exposure of sensitive information. To remediate the issue, it is recommended to update the affected Jenkins Gradle Plugin to a version that fixes the vulnerability.

Leverage our Vulnerability Intelligence module to secure your systems now - get detailed insights on CVE-2024-37364. Book your demo today.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-39152 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options