CVE-2025-64144

The Jenkins ByteGuard Build Actions Plugin version 1.0 and earlier stores API tokens unencrypted within job config.xml files on the Jenkins controller. This configuration flaw allows users with Item/Extended Read permissions, or anyone with access to the Jenkins controller file system, to view se...

CVE-2025-64145

The Jenkins ByteGuard Build Actions Plugin (version 1.0 and earlier) fails to mask API tokens on the job configuration form. This allows attackers to observe and capture these credentials, increasing the risk of unauthorized access. Additionally, the plugin stores these API tokens unencrypted in ...