3.1

CVE-2025-30197

Jenkins Zoho QEngine Plugin 1.0.29.vfa_cc23396502 and earlier does not mask the QEngine API Key form field, increasing the potential for attackers to observe and capture it.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Jenkins ≫ Zoho Qengine SwPlatform jenkins Version <= 1.0.29.vfa_cc23396502
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.27% 0.196
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 3.1 1.6 1.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
CWE-549 Missing Password Field Masking

The product does not mask passwords during entry, increasing the potential for attackers to observe and capture passwords.

https://www.jenkins.io/security/advisory/2025-03-19/#SECURITY-3511
Vendor Advisory