CVE Intelligence

Jenkins Project Jenkins OpenShift Pipeline Plugin vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Jenkins Project Jenkins OpenShift Pipeline Plugin: 1 record(s), with affected versions and fixes.

CVE-2025-64143 Medium · 4.3 CWE-311 Oct 29, 2025
Missing Encryption of Sensitive Data in Jenkins Openshift Pipeline
Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system.