CVE-2025-64132_CVE-2025-64132

5.4 / 10

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Description

Jenkins MCP Server Plugin 0.84.v50ca_24ef83f2 and earlier does not perform permission checks in multiple MCP tools, allowing attackers to trigger builds and obtain information about job and cloud configuration they should not be able to access.

Basic Information

ID CVE-2025-64132

Source jenkins

Published Oct 29, 2025 at 13:29

Modified Oct 29, 2025 at 14:05

Affected Product

Vendor Jenkins Project

Product Jenkins MCP Server Plugin

Affected Versions Jenkins Project Jenkins MCP Server Plugin 0

CWE Classification

CWE-862

References

www.jenkins.io /security/advisory/2025-10-29/

{
    "lastseen": "",
    "description": "Jenkins MCP Server Plugin 0.84.v50ca_24ef83f2 and earlier does not perform permission checks in multiple MCP tools, allowing attackers to trigger builds and obtain information about job and cloud configuration they should not be able to access.",
    "published": "2025-10-29T13:29:40.401Z",
    "modified": "2025-10-29T14:05:33.219Z",
    "type": "cve",
    "title": "CVE-2025-64132",
    "source": "jenkins",
    "references": "https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3622",
    "id": "CVE-2025-64132",
    "bulletinFamily": "",
    "cwe": [
        "CWE-862"
    ],
    "cvelist": null,
    "sourceData": "Jenkins Project Jenkins MCP Server Plugin 0",
    "sourceHref": "",
    "cvss": {
        "score": 5.4,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Jenkins MCP Server Plugin",
    "version": "0",
    "vendor": "Jenkins Project",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}