# org.jenkins-ci.plugins:credentials (Maven) vulnerabilities 5 known vulnerabilities (1 high), with the versions each affects and the releases that fix them. ## At a glance - Latest release: not known (cve.now hasn't read this package's releases) - Newest unaffected release: not known without release data - Registry: https://central.sonatype.com/artifact/org.jenkins-ci.plugins/credentials ## Advisories (5) ### [CVE-2024-47805](https://cve.now/CVE-2024-47805): Jenkins Credentials Plugin 1380.va\_435002fa\_924 and earlier, except 1371.1373.v4eb\_fa\_b\_7161e9, does not redact encrypted values of… - Severity: High 7.5 - Published: Oct 2, 2024 - Affected: from 1372, fixed in 1381.v2c3a; fixed in 1371.1373.v4eb. ### [CVE-2022-29036](https://cve.now/CVE-2022-29036): Jenkins Credentials Plugin 1111.v35a\_307992395 and earlier, except 1087.1089.v2f1b\_9a\_b\_040e4, 1074.1076.v39c30cecb\_0e2, and 2.6.1.1, does… - Severity: Unrated - Published: Apr 12, 2022 - Affected: fixed in 2.6.1.1; from 2.6.2, fixed in 1074.1076.v39c30cecb_0e2; from 1087.v16065d268466, fixed in 1087.1089.v2f1b_9a_b_040e4; from 1105, through 1111.v35a. ### [CVE-2021-21648](https://cve.now/CVE-2021-21648): Jenkins Credentials Plugin 2.3.18 and earlier does not escape user-controlled information on a view it provides, resulting in a reflected… - Severity: Unrated - Published: May 11, 2021 - Affected: from 2.3.16, fixed in 2.3.19; from 2.3.15, fixed in 2.3.15.1; from 2.3.14, fixed in 2.3.14.1; from 2.3.8, fixed in 2.3.13.1; from 2.3.1, fixed in 2.3.7.1; fixed in 2.3.0.1. ### [CVE-2019-10320](https://cve.now/CVE-2019-10320): Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of… - Severity: Unrated - Published: May 21, 2019 - Affected: fixed in 2.1.19. ### [CVE-2018-1000601](https://cve.now/CVE-2018-1000601): A arbitrary file read vulnerability exists in Jenkins SSH Credentials Plugin 1.13 and earlier in BasicSSHUserPrivateKey.java that allows… - Severity: Unrated - Published: Jun 26, 2018 - Affected: fixed in 2.1.17. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/maven/org.jenkins-ci.plugins:credentials Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.