GHSA-jx45-xp6q-cwjc

ghsaUSosv

Jenkins Zoom Plugin Stores Sensitive Information in Cleartext

view advisory published 2025-01-30Licence: CC-BY-4.0

Cleartext storage of sensitive information in the Zoom Jenkins Marketplace plugin before version 1.4 may allow an authenticated user to conduct a disclosure of information via network access.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-0142US	—OT elevated	0.27% (20th)	—	2025-01-30
Cleartext storage of sensitive information in the Zoom Jenkins Marketplace plugin before version 1.4 may allow an authenticated user to conduct a disclosure of information via netw…

references

External citations — patches, advisories, analysis.

https://github.com/jenkinsci/zoom-pluginPACKAGE
https://nvd.nist.gov/vuln/detail/CVE-2025-0142ADVISORY
https://www.zoom.com/en/trust/security-bulletin/zsb-25001WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan