Vulnerabilidades do Jenkins Project Jenkins OpenShift Pipeline Plugin

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Jenkins Project Jenkins OpenShift Pipeline Plugin: 1 registro(s), com versões afetadas e correções.

CVE-2025-64143 Média · 4.3 CWE-311 29/10/2025

Missing Encryption of Sensitive Data em Jenkins Openshift Pipeline

Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system.