CVEvulnerability

CVE-2025-67638

4.3 MEDIUM Published 2025-12-10 Modified 2026-10-14 Official page ↗
Status
Analyzed
Published
2025-12-10
Last modified
2026-10-14
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-312

Description

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

Affected configurations

• jenkins jenkins (< 2.528.3) • jenkins jenkins (< 2.541)

Related

Weakness · CWE (1)

  • CWE-312 Cleartext Storage of Sensitive Information weakness

References