Jenkins Job Configuration History vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Jenkins Job Configuration History: 1 record(s), with affected versions and fixes.
cpe:2.3:a:jenkins:job_configuration_history

CVE-2026-57287 Medium · 4.3 CWE-312 Jun 24, 2026

Jenkins Job Configuration History Plugin doesn't redact encrypted values of secrets in job and agent configurations

Jenkins Job Configuration History Plugin 1356.ve360da_6c523a_ and earlier does not redact the encrypted values of secrets when displaying historical job and agent configurations, allowing attackers with Extended Read permission to view encrypted secret values that would otherwise be redacted.