description: Jenkins Chef Identity Plugin 2.0.3 and earlier does not mask the user.pem key form field, increasing the potential for attackers to observe and capture it.
affected:
{
defaultStatus: unknown
product: Jenkins Chef Identity Plugin
vendor: Jenkins Project
versions:
lessThanOrEqual: 2.0.3, status: affected, version: 0, versionType: maven
}