CVE-2020-2182: Jenkins Credentials Binding

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a `$` character in some circumstances.

Affected products

• Jenkins Credentials Binding: up to and including 1.22

Published 2020-05-06. Last modified 2026-06-17.