CVEvulnerability
CVE-2025-64145
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-10-29
- Last modified
- 2026-10-08
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-311
Description
Jenkins ByteGuard Build Actions Plugin 1.0 does not mask API tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
Affected configurations
• jenkins byteguard build actions 1.0
Related
Weakness · CWE (1)
- CWE-311 Missing Encryption of Sensitive Data weakness
References
- https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3560 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2025/10/29/2 www.openwall.com