CVE-2023-41934

Name of the Vulnerable Software and Affected Versions Jenkins Pipeline Maven Integration Plugin versions 1330.v18e473854496 and earlier

Description The issue concerns the Jenkins Pipeline Maven Integration Plugin, which does not properly mask usernames of credentials specified in custom Maven settings in Pipeline build logs when "Treat username as secret" is checked. This affects the security of credentials by potentially exposing them in the build logs.

Recommendations For Jenkins Pipeline Maven Integration Plugin versions 1330.v18e473854496 and earlier, consider disabling the "Treat username as secret" option until a patch is available, or restrict access to the Pipeline build logs to minimize the risk of credential exposure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.