4 matches found
CVE-2025-68703: Inadequate Encryption Strength
Jervis is a library for Job DSL plugin scripts and shared Jenkins pipeline libraries. Prior to 2.2, the salt is derived from sha256Sumpassphrase. Two encryption operations with the same password will have the same derived key. This vulnerability is fixed in 2.2...
8.7CVSS5.9AI score0.0013EPSS
SaveExploits0References1
20