org.jenkins-ci.main:jenkins-test-harness (1.582), org.jenkins-ci.main:jenkins-war (1.582) +2 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (1.582)

org.jenkins-ci.main:jenkins-core MAVEN version 1.582 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.582 - org.jenkins-ci.main:jenkins-war 1.582 -...

org.jenkins-ci.main:jenkins-test-harness (1.582), org.jenkins-ci.main:jenkins-war (1.582) +2 more potentially affected by CVE-2025-67636 via org.jenkins-ci.main:jenkins-core (1.582)

org.jenkins-ci.main:jenkins-core MAVEN version 1.582 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.582 - org.jenkins-ci.main:jenkins-war 1.582 -...

org.jenkins-ci.main:jenkins-test-harness (1.551), org.jenkins-ci.main:jenkins-war (1.551) +4 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.551)

org.jenkins-ci.main:jenkins-core MAVEN version 1.551 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.551 - org.jenkins-ci.main:jenkins-war 1.551 -...

io.jenkins.plugins:csp (>=2.57.va_b_326b_54f1ee, <=2.58.v31cd65258cb_2), io.jenkins.plugins:custom-folder-icon (>=2.22, <=2.938.vb_42c40c33ea_5) +10 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (>=2.529, <=2.540)

org.jenkins-ci.main:jenkins-core MAVEN version =2.529, =2.57.vab326b54f1ee, =2.22, =255.v3a5dec1abe28, =0.119.v479294b419a7, =664.v998752b00adc, =2.529, =1398.v67030756d3fb, =1925.v62fb7ffb08ce, =212.210.v6a4ffe269ef8, =1372.vfeaf21efab26, =4.626.ve5ad9f26c051, =4.731.v4932b506e767 -...

io.jenkins.plugins:csp (>=2.57.va_b_326b_54f1ee, <=2.58.v31cd65258cb_2), io.jenkins.plugins:custom-folder-icon (>=2.22, <=2.938.vb_42c40c33ea_5) +10 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (>=2.529, <=2.540)

org.jenkins-ci.main:jenkins-core MAVEN version =2.529, =2.57.vab326b54f1ee, =2.22, =255.v3a5dec1abe28, =0.119.v479294b419a7, =664.v998752b00adc, =2.529, =1398.v67030756d3fb, =1925.v62fb7ffb08ce, =212.210.v6a4ffe269ef8, =1372.vfeaf21efab26, =4.626.ve5ad9f26c051, =4.731.v4932b506e767 -...

io.jenkins.plugins:csp (>=2.57.va_b_326b_54f1ee, <=2.58.v31cd65258cb_2), io.jenkins.plugins:custom-folder-icon (>=2.22, <=2.938.vb_42c40c33ea_5) +10 more potentially affected by CVE-2025-67638 via org.jenkins-ci.main:jenkins-core (>=2.529, <=2.540)

org.jenkins-ci.main:jenkins-core MAVEN version =2.529, =2.57.vab326b54f1ee, =2.22, =255.v3a5dec1abe28, =0.119.v479294b419a7, =664.v998752b00adc, =2.529, =1398.v67030756d3fb, =1925.v62fb7ffb08ce, =212.210.v6a4ffe269ef8, =1372.vfeaf21efab26, =4.626.ve5ad9f26c051, =4.731.v4932b506e767 -...

io.jenkins.plugins:csp (>=2.57.va_b_326b_54f1ee, <=2.58.v31cd65258cb_2), io.jenkins.plugins:custom-folder-icon (>=2.22, <=2.938.vb_42c40c33ea_5) +10 more potentially affected by CVE-2025-67637 via org.jenkins-ci.main:jenkins-core (>=2.529, <=2.540)

org.jenkins-ci.main:jenkins-core MAVEN version =2.529, =2.57.vab326b54f1ee, =2.22, =255.v3a5dec1abe28, =0.119.v479294b419a7, =664.v998752b00adc, =2.529, =1398.v67030756d3fb, =1925.v62fb7ffb08ce, =212.210.v6a4ffe269ef8, =1372.vfeaf21efab26, =4.626.ve5ad9f26c051, =4.731.v4932b506e767 -...

Jenkins is missing a permission check on password fields

A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Read permission to view encrypted password values in views...

EUVD-2025-202460

Jenkins is missing a permission check on password fields...

GHSA-P3F5-98CV-562J Jenkins is missing a permission check on password fields

A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Read permission to view encrypted password values in views...

org.jenkins-ci.main:jenkins-test-harness (1.551), org.jenkins-ci.main:jenkins-war (1.551) +4 more potentially affected by CVE-2025-67636 via org.jenkins-ci.main:jenkins-core (1.551)

org.jenkins-ci.main:jenkins-core MAVEN version 1.551 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.551 - org.jenkins-ci.main:jenkins-war 1.551 -...

CVE-2025-67636

A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Read permission to view encrypted password values in views...

CVE-2025-67636

A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Read permission to view encrypted password values in views...

io.jenkins.plugins:csp (>=2.57.va_b_326b_54f1ee, <=2.58.v31cd65258cb_2), io.jenkins.plugins:custom-folder-icon (>=2.22, <=2.938.vb_42c40c33ea_5) +10 more potentially affected by CVE-2025-67638 via org.jenkins-ci.main:jenkins-core (>=2.529, <=2.540)

org.jenkins-ci.main:jenkins-core MAVEN version =2.529, =2.57.vab326b54f1ee, =2.22, =255.v3a5dec1abe28, =0.119.v479294b419a7, =664.v998752b00adc, =2.529, =1398.v67030756d3fb, =1925.v62fb7ffb08ce, =212.210.v6a4ffe269ef8, =1372.vfeaf21efab26, =4.626.ve5ad9f26c051, =4.731.v4932b506e767 -...

CVE-2025-67636

A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Read permission to view encrypted password values in views...

CVE-2025-67636

A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Read permission to view encrypted password values in views...

CVE-2025-67636

A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Read permission to view encrypted password values in views...

CVE-2025-67636

A missing permission check in Jenkins 2.540 and earlier (including LTS 2.528.2 and earlier ) allows attackers with View/Read permissions to view encrypted password values in views. This vulnerability is associated with CWE-862 (Missing Authorization) and has a MEDIUM base severity. No specific ex...

CVE-2025-67636

A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Read permission to view encrypted password values in views...

CVE-2025-63034

Missing Authorization vulnerability in Steve Truman Page View Count page-views-count allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page View Count: from n/a through = 2.9.0...