Jenkins Openshift Pipeline vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Jenkins Openshift Pipeline: 1 record(s), with affected versions and fixes.
cpe:2.3:a:jenkins:openshift_pipeline

CVE-2025-64143 Medium · 4.3 CWE-311 Oct 29, 2025

Missing Encryption of Sensitive Data in Jenkins Openshift Pipeline

Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system.