VULNERABILITY INTELLIGENCE
CVE-2026-33004
CVSS score4.3 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2026-03-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description
Jenkins LoadNinja Plugin 2.1 and earlier does not mask LoadNinja API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-200
Primary references
- jenkinsci-cert@googlegroups.com — Vendor Advisory