5 matches found
CVE-2025-30197
Jenkins Zoho QEngine Plugin 1.0.29.vfacc23396502 and earlier does not mask the QEngine API Key form field, increasing the potential for attackers to observe and capture it...
3.1CVSS6.7AI score
SaveExploits0References1
CVE-2025-30197
Jenkins Zoho QEngine Plugin 1.0.29.vfacc23396502 and earlier does not mask the QEngine API Key form field, increasing the potential for attackers to observe and capture it...
3.1CVSS0.00277EPSS
SaveExploits0References1
CVE-2025-30197
The Jenkins Zoho QEngine Plugin (versions 1.0.29.vfa_cc23396502 and earlier) fails to mask the QEngine API Key form field. While the plugin stores this key encrypted on the Jenkins controller's config.xml files, the lack of masking in the configuration form increases the risk of attackers observi...
6.5AI score0.00277EPSS
SaveExploits0References1Affected Software1
20