Vulnerabilities (CVE)

Filtered by vendor Jenkins Subscribe
Filtered by product Openshift Pipeline
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-64143 1 Jenkins 1 Openshift Pipeline 2025-11-04 N/A 4.3 MEDIUM
Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system.
CVE-2020-2167 1 Jenkins 1 Openshift Pipeline 2024-11-21 6.5 MEDIUM 8.8 HIGH
Jenkins OpenShift Pipeline Plugin 1.0.56 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.