4.3
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description
Jenkins Job Configuration History Plugin 1356.ve360da_6c523a_ and earlier does not redact the encrypted values of secrets when displaying historical job and agent configurations, allowing attackers with Extended Read permission to view encrypted secret values that would otherwise be redacted.
Basic Information
ID
CVE-2026-57287
Source
jenkins
Published
Jun 24, 2026 at 13:20
Modified
Jun 24, 2026 at 14:12
Affected Product
Vendor
Jenkins Project
Product
Jenkins Job Configuration History Plugin
Affected Versions
Jenkins Project Jenkins Job Configuration History Plugin 0