CNNVD-202507-1320 Information
CNNVD ID
CNNVD-202507-1320
Related CVE
- CNNVD Published: 2025-07-09
Description (Chinese)
Jenkins和Jenkins plugin都是Jenkins开源的产品。Jenkins是一个应用软件。一个开源自动化服务器Jenkins提供了数百个插件来支持构建，部署和自动化任何项目。Jenkins plugin是一个应用软件插件。 Jenkins plugin Statistics Gatherer 2.0.3之前版本存在安全漏洞，该漏洞源于AWS密钥未屏蔽显示，可能导致凭据泄露。
Description (English)
Jenkins and Jenkins plugin are all Jenkins open-source products. Jenkins is an application. Jenkins, an open-source automated server, provided hundreds of plugins to support construction, deployment and automation of any project. Jenkins plugin is an application plugin. There was a security loophole in the previous version of Jenkins puginstatistics Gatherer 2.0.3, which originated in the unshielded AWS key, which could lead to a leak of evidence.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Jenkins
Published
2025-07-09
Last Modified
2026-02-24
References
https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3554 https://vigilance.fr/vulnerability/Jenkins-Plugins-multiple-vulnerabilities-dated-09-07-2025-47671
Patch
https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3554
Share on: