Vulnerabilidades do Jenkins Openshift Pipeline

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Jenkins Openshift Pipeline: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:jenkins:openshift_pipeline

CVE-2025-64143 Média · 4.3 CWE-311 29/10/2025

Missing Encryption of Sensitive Data em Jenkins Openshift Pipeline

Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system.