{"id":"CVE-2020-2182","aliases":["EUVD-2022-2983","GHSA-7ff8-qfwx-8gx5","RHBA-2020:2990","RHSA-2020:3453","RHSA-2020:3625","RHSA-2020:4265"],"status":"published","title":"Improper masking of some secrets in Jenkins Credentials Binding Plugin","description":"Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a `$` character in some circumstances.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00899,"percentile":0.59859,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-522"],"published":"2020-05-06T12:45:23Z","modified":"2026-10-24T10:30:36Z","fixes":[{"ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials-binding","fixed_in":["1.23"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials-binding","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.22"},{"fixed":"1.23"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials-binding","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23"}]}],"versions":["1.0","1.0-beta-1","1.1","1.10","1.11","1.12","1.13","1.14","1.15","1.16","1.17","1.18","1.19","1.2","1.20","1.20.1","1.21","1.22","1.3","1.4","1.5","1.6","1.7","1.8","1.9"]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-enterprise-service-catalog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.11.248-1.git.1.9aad2ef.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-enterprise-service-catalog-svcat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.11.248-1.git.1.9aad2ef.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-cluster-autoscaler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.1.b5530f6.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-descheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.1.108ef32.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-dockerregistry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.1.bb4a1fc.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-metrics-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.1.b53e0e3.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-node-problem-detector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.1.628ff22.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-service-idler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.1.4c42a90.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-openshift-oauth-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.1.9885abb.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-prometheus-alertmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.1.66abd18.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.1.32f87fc.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-prometheus-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.1.ad54f5b.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.1593081747-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.0.fd212c7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.0.fd212c7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-playbooks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.0.fd212c7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-roles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.0.fd212c7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.0.fd212c7.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-enterprise-autoheal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.1.0020348.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-enterprise-cluster-capacity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.1.37b107c.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-kuryr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.1.f90c804.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-kuryr-cni","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.1.f90c804.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-kuryr-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.1.f90c804.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-kuryr-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.1.f90c804.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.1.ad54f5b.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"prometheus-alertmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.1.66abd18.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"prometheus-node-exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.1.32f87fc.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"python-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.3-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"python2-kuryr-kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.1.f90c804.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"python2-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24.3-1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.1596698303-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"python-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.5::el7","package":"python2-rsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.4::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.1598545590-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el7","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.1601981312-1.el7"}]}],"bundled":5}],"products":[{"vendor":"jenkins","product":"credentials_binding"},{"vendor":"jenkins project","product":"jenkins credentials binding plugin"}],"references":[{"url":"https://jenkins.io/security/advisory/2020-05-06/#SECURITY-1835","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","article"]},{"url":"http://www.openwall.com/lists/oss-security/2020/05/06/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2182","tags":["advisory"]},{"url":"https://github.com/jenkinsci/credentials-binding-plugin/commit/77681e0d184b0ccafa2a27da3b3bdbba95b4fe8f","tags":["web"]},{"url":"https://github.com/advisories/GHSA-7ff8-qfwx-8gx5"},{"url":"https://github.com/jenkinsci/credentials-binding-plugin","tags":["package"]},{"url":"https://access.redhat.com/errata/RHBA-2020:2990","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1741138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1746144","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1753649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1763610","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1773406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1791837","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1795393","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1807822","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1824243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828484","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1841439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1845676","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1846126","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847478","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1848492","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1848723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1856250","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_2990.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2181","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847341","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2181","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2181","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2020-05-06/#SECURITY-1374","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847348","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2182","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3453","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1848507","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1857436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1857439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1857441","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3453.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2224","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2224","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2224","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2225","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2225","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2225","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2226","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2226","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2226","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-13757","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-13757","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13757","tags":["advisory"]},{"url":"https://github.com/sybrenstuvel/python-rsa/issues/146","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2020:3625","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847337","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1861840","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3625.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2190","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2190","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2190","tags":["advisory"]},{"url":"https://jenkins.io/security/advisory/2020-06-03/#SECURITY-1866","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4265","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1861842","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4265.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-2182","description":"Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a `$` character in some circumstances.","status":"published","published":"2020-05-06T12:45:23Z","modified":"2024-08-04T07:01:40.977Z","updated_at":"2026-11-02T14:35:51.563355Z"}],"euvd":[{"id":"EUVD-2022-2983","description":"Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a `$` character in some circumstances.","status":"published","published":"2020-05-06T12:45:23Z","modified":"2024-08-04T07:01:40Z","updated_at":"2026-11-03T03:08:10.95725Z"}],"ghsa":[{"id":"GHSA-7ff8-qfwx-8gx5","title":"Improper masking of some secrets in Jenkins Credentials Binding Plugin","description":"Credentials Binding Plugin allows specifying passwords and other secrets as environment variables, and will hide them from console output in builds. As a side effect of the fix for [SECURITY-698](https://www.jenkins.io/security/advisory/2018-02-05/#credentials-binding), `$` characters in secrets are escaped to `$$`. This will then be expanded to $ again once the secret is passed to (post) build steps.\n\nCredentials Binding Plugin 1.22 and earlier does not mask the escaped form of the secret (containing `$$`). This occurs for example in the \\\"Execute Maven top-level targets\\\" build step included in Jenkins.\\n\\nCredentials Binding Plugin 1.23 now masks secrets both in their original form and with escaped `$` characters, so they will be masked even if printed before value expansion.","status":"published","published":"2022-05-24T17:17:14Z","modified":"2023-12-07T21:37:52Z","cvss":[{"version":"3.0","score":3.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T14:37:24.593982Z"}],"nvd":[{"id":"CVE-2020-2182","description":"Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a `$` character in some circumstances.","status":"published","published":"2020-05-06T13:15:14.18Z","modified":"2026-06-17T03:11:56.45Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T14:05:59.718774Z"}],"osv":[{"id":"CVE-2020-2182","description":"Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a `$` character in some circumstances.","status":"published","published":"2020-05-06T13:15:14.18Z","modified":"2026-10-24T10:30:36.828038323Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:15.534837Z"},{"id":"GHSA-7ff8-qfwx-8gx5","title":"Improper masking of some secrets in Jenkins Credentials Binding Plugin","description":"Credentials Binding Plugin allows specifying passwords and other secrets as environment variables, and will hide them from console output in builds. As a side effect of the fix for [SECURITY-698](https://www.jenkins.io/security/advisory/2018-02-05/#credentials-binding), `$` characters in secrets are escaped to `$$`. This will then be expanded to $ again once the secret is passed to (post) build steps.\n\nCredentials Binding Plugin 1.22 and earlier does not mask the escaped form of the secret (containing `$$`). This occurs for example in the \\\"Execute Maven top-level targets\\\" build step included in Jenkins.\\n\\nCredentials Binding Plugin 1.23 now masks secrets both in their original form and with escaped `$` characters, so they will be masked even if printed before value expansion.","status":"published","published":"2022-05-24T17:17:14Z","modified":"2024-02-16T08:19:44.980365Z","cvss":[{"version":"3.0","score":3.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T15:46:41.002603Z"},{"id":"RHBA-2020:2990","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11.248 bug fix and enhancement update","status":"published","published":"2024-09-16T04:35:48Z","modified":"2026-06-27T10:08:52Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2020:3453","title":"Red Hat Security Advisory: OpenShift Container Platform 4.5.6 security update","status":"published","published":"2024-09-16T04:40:56Z","modified":"2026-06-28T10:38:52Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:3625","title":"Red Hat Security Advisory: OpenShift Container Platform 4.4.20 jenkins-2-plugins security update","status":"published","published":"2024-09-16T04:41:12Z","modified":"2026-06-27T10:11:06Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2020:4265","title":"Red Hat Security Advisory: OpenShift Container Platform 4.3.40 jenkins-2-plugins security update","status":"published","published":"2024-09-16T04:41:21Z","modified":"2026-06-27T10:11:44Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"}]}}