CVE-2023-33001 (published 2023-05-16T16:00:18.099Z)
Jenkins HashiCorp Vault Plugin 360.v0a_1c04cf807d and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled.
Affected products: Vendor: Jenkins Project
Product: Jenkins HashiCorp Vault Plugin
Versions: 0