CVE-2026-57289

Jenkins Bitbucket Push and Pull Request Plugin 3.3.8 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections sending Bearer token authenticated requests to the configured Bitbucket Server endpoint, allowing attackers able to intercept network traffic to capture the token.

CVSS v3 4.8 MEDIUM

4.8^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.2 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3856	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:jenkins:bitbucket_push_and_pull_request:*:*:*:*:*:jenkins:*:*

History

25 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) El plugin Jenkins Bitbucket Push and Pull Request 3.3.8 y versiones anteriores deshabilita incondicionalmente la validación de certificados SSL/TLS y de nombres de host para las conexiones que envían solicitudes autenticadas con token Bearer al endpoint de Bitbucket Server configurado, lo que permite a los atacantes capaces de interceptar el tráfico de red capturar el token.

Information

Published : 2026-06-24 14:17

Updated : 2026-10-25 22:10

NVD link : CVE-2026-57289

Mitre link : CVE-2026-57289

CVE.ORG link : CVE-2026-57289

JSON object : View

Products Affected

jenkins

bitbucket_push_and_pull_request

CWE

CWE-295

Improper Certificate Validation

{"id": "CVE-2026-57289", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-57289", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-24T14:15:12.385742Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 2.2}]}, "affected": [{"source": "jenkinsci-cert@googlegroups.com", "affectedData": [{"vendor": "Jenkins Project", "product": "Jenkins Bitbucket Push and Pull Request Plugin", "versions": [{"status": "affected", "version": "0", "versionType": "maven", "lessThanOrEqual": "3.3.8"}], "defaultStatus": "unaffected"}]}], "published": "2026-06-24T14:17:35.140", "references": [{"url": "https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3856", "tags": ["Vendor Advisory"], "source": "jenkinsci-cert@googlegroups.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-295"}]}], "descriptions": [{"lang": "en", "value": "Jenkins Bitbucket Push and Pull Request Plugin 3.3.8 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections sending Bearer token authenticated requests to the configured Bitbucket Server endpoint, allowing attackers able to intercept network traffic to capture the token."}, {"lang": "es", "value": "El plugin Jenkins Bitbucket Push and Pull Request 3.3.8 y versiones anteriores deshabilita incondicionalmente la validaci\u00f3n de certificados SSL/TLS y de nombres de host para las conexiones que env\u00edan solicitudes autenticadas con token Bearer al endpoint de Bitbucket Server configurado, lo que permite a los atacantes capaces de interceptar el tr\u00e1fico de red capturar el token."}], "lastModified": "2026-10-25T22:10:00.150", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:jenkins:bitbucket_push_and_pull_request:*:*:*:*:*:jenkins:*:*", "vulnerable": true, "matchCriteriaId": "E2F8FAD7-B7B9-440C-B33A-E3EC756EAD1D", "versionEndExcluding": "3.3.9"}], "operator": "OR"}]}], "sourceIdentifier": "jenkinsci-cert@googlegroups.com"}