description: Jenkins Config File Provider Plugin 952.va_544a_6234b_46 and earlier does not mask (i.e., replace with asterisks) credentials specified in configuration files when they're written to the build log.
affected:
{
defaultStatus: affected
product: Jenkins Config File Provider Plugin
vendor: Jenkins Project
versions:
lessThan: *, status: unaffected, version: 953.v0432a_802e4d2, versionType: maven
status: unaffected, version: 951.953.vdfc5f6e2dcc4
}