VULNERABILITY INTELLIGENCE

CVE-2025-67638

CVSS score4.3 MEDIUM
EPSS probability0.16%
CISA KEVNot currently listed
Published2025-12-10
Last modified2026-10-14
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-312

Primary references