CVE-2025-64143

score

<0.1

cvss

4.3

epss

0.2%

published

2025-10-29

kev added

—

first seen

2026-10-21

Jenkins OpenShift Pipeline Plugin <= 1.0.57 contains an information disclosure vulnerability caused by storing authorization tokens unencrypted in job config.xml files, letting users with Item/Extended Read permission or file system access view sensitive tokens, exploit requires specific permissions or file system access.