CVE-2023-25721: Veracode

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Veracode Scan Jenkins Plugin before 23.3.19.0, when the "Connect using proxy" option is enabled and configured with proxy credentials and when the Jenkins global system setting debug is enabled and when a scan is configured for remote agent jobs, allows users (with access to view the job log) to discover proxy credentials.

Affected products

• Veracode Veracode: before 23.3.19.0 (fixed in 23.3.19.0)

Published 2023-03-28. Last modified 2026-06-17.