← All advisories

Moderate severityNVD Advisory· Published Mar 6, 2024· Updated Mar 27, 2025

CVE-2024-28154

CVE-2024-28154

Description

Jenkins MQ Notifier Plugin 1.4.0 and earlier logs potentially sensitive build parameters as part of debug information in build logs by default.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
com.sonymobile.jenkins.plugins.mq:mq-notifierMaven	< 1.4.1	1.4.1

Affected products

2

ghsa-coords
pkg:maven/com.sonymobile.jenkins.plugins.mq/mq-notifier
Range: < 1.4.1
Jenkins Project/Jenkins Amazon Sns Build Notifier Plugincpe-rescue
Range: 0

Patches

Vulnerability mechanics

References

5

github.com/advisories/GHSA-8fm4-r23p-v68vghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-28154ghsaADVISORY
www.jenkins.io/security/advisory/2024-03-06/ghsavendor-advisoryWEB
www.openwall.com/lists/oss-security/2024/03/06/3ghsaWEB
github.com/jenkinsci/mq-notifier-plugin/commit/46c9f228a3317eb87562bc3d99f7e184bdcecbfeghsaWEB

News mentions

1

Jenkins Security Advisory 2024-03-06
Jenkins Security Advisories · Mar 6, 2024