description: Jenkins Dingding JSON Pusher Plugin 2.0 and earlier does not mask access tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
affected:
{
vendor: Jenkins Project
product: Jenkins Dingding JSON Pusher Plugin
versions:
version: 0, versionType: maven, lessThanOrEqual: 2.0, status: affected
defaultStatus: unknown
}