Jenkins Support Core Plugin stores sensitive data in plain text

MOYENNE 6.5CVE-2022-25187 · GHSA-5m8f-v3gw-h94w · Published 15/02/2022 · updated 17/06/2026

En bref

CVE-2022-25187 est une vulnérabilité MOYENNE (CVSS 6.5) touchant org.jenkins-ci.plugins:support-core, support core (jenkins).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.97%, plus élevée que 61.8% des vulnérabilités.
Correctif : mettre à jour vers 2.79.1 ou plus récent.

Package	Affected versions	Patched versions
org.jenkins-ci.plugins:support-core Maven	`< 2.79.1`	`2.79.1`
support core jenkins	`≤ 2.79`	No fix yet

Description

Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle. Support Core Plugin 2.79.1 adds a list of keywords whose associated values are redacted.

NVD description

Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle.

References

nvd.nist.gov/vuln/detail/CVE-2022-25187 · ADVISORY
jenkinsci/support-core-plugin commit c6d20da · WEB
jenkinsci/support-core-plugin commit e90487a · WEB
jenkinsci/support-core-plugin · PACKAGE
jenkins.io/security/advisory/2022-02-15 · WEB

Autres vulnérabilités de org.jenkins-ci.plugins:support-core

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.jenkins-ci.plugins:support-core

Maven

< 2.79.1

2.79.1

support core

jenkins

≤ 2.79

No fix yet

Description

Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle. Support Core Plugin 2.79.1 adds a list of keywords whose associated values are redacted.

NVD description

Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle.

Autres vulnérabilités de org.jenkins-ci.plugins:support-core

Tout voir →