CVE-2025-64143

Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3553	Vendor Advisory
http://www.openwall.com/lists/oss-security/2025/10/29/2

Configurations

Configuration 1 (hide)

cpe:2.3:a:jenkins:openshift_pipeline:*:*:*:*:*:jenkins:*:*

History

08 Oct 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) Jenkins OpenShift Pipeline Plugin 1.0.57 y versiones anteriores almacena tokens de autorización sin cifrar en los archivos config.xml de los trabajos en el controlador de Jenkins, donde pueden ser vistos por usuarios con permiso de Lectura Extendida/Elemento, o acceso al sistema de archivos del controlador de Jenkins.

Information

Published : 2025-10-29 14:15

Updated : 2026-10-08 11:10

NVD link : CVE-2025-64143

Mitre link : CVE-2025-64143

CVE.ORG link : CVE-2025-64143

JSON object : View

Products Affected

jenkins

openshift_pipeline

CWE

CWE-311

Missing Encryption of Sensitive Data

{"id": "CVE-2025-64143", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-64143", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-29T14:01:04.005431Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "jenkinsci-cert@googlegroups.com", "affectedData": [{"vendor": "Jenkins Project", "product": "Jenkins OpenShift Pipeline Plugin", "versions": [{"status": "affected", "version": "0", "versionType": "maven", "lessThanOrEqual": "1.0.57"}], "defaultStatus": "unknown"}]}], "published": "2025-10-29T14:15:58.993", "references": [{"url": "https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3553", "tags": ["Vendor Advisory"], "source": "jenkinsci-cert@googlegroups.com"}, {"url": "http://www.openwall.com/lists/oss-security/2025/10/29/2", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-311"}]}], "descriptions": [{"lang": "en", "value": "Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system."}, {"lang": "es", "value": "Jenkins OpenShift Pipeline Plugin 1.0.57 y versiones anteriores almacena tokens de autorizaci\u00f3n sin cifrar en los archivos config.xml de los trabajos en el controlador de Jenkins, donde pueden ser vistos por usuarios con permiso de Lectura Extendida/Elemento, o acceso al sistema de archivos del controlador de Jenkins."}], "lastModified": "2026-10-08T11:10:00.250", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:jenkins:openshift_pipeline:*:*:*:*:*:jenkins:*:*", "vulnerable": true, "matchCriteriaId": "D163A2B0-4F41-4A68-B2B4-36E4387DF88C", "versionEndIncluding": "1.0.57"}], "operator": "OR"}]}], "sourceIdentifier": "jenkinsci-cert@googlegroups.com"}