CVE-2023-40339 (published 2023-08-16T14:32:51.314Z)
Jenkins Config File Provider Plugin 952.va_544a_6234b_46 and earlier does not mask (i.e., replace with asterisks) credentials specified in configuration files when they're written to the build log.
Affected products: Vendor: Jenkins Project
Product: Jenkins Config File Provider Plugin
Versions: 953.v0432a_802e4d2, 951.953.vdfc5f6e2dcc4