CNNVD-202510-4013 Information
CNNVD ID
CNNVD-202510-4013
Related CVE
- CNNVD Published: 2025-10-29
Description (Chinese)
Jenkins和Jenkins plugin都是Jenkins开源的产品。Jenkins是一个应用软件。一个开源自动化服务器Jenkins提供了数百个插件来支持构建，部署和自动化任何项目。Jenkins plugin是一个应用软件插件。 Jenkins plugin Eggplant Runner 0.0.1.301.v963cffe8ddb_8及之前版本存在安全漏洞，该漏洞源于将Java系统属性jdk.http.auth.tunneling.disabledSchemes设置为空值，禁用了Java运行时的保护机制。
Description (English)
Jenkins and Jenkins plugin are all Jenkins open-source products. Jenkins is an application. Jenkins, an open-source automated server, provided hundreds of plugins to support construction, deployment and automation of any project. Jenkins plugin is an application plugin. Jenkins plugin Eggplant Runner 0.01.301.v96cfe8ddb 8 and previous versions contain a security loophole resulting from the setting of the Java system attribute jdk.http.auth.tunneling.disabledSchemes to an empty value and the use of the Java-operated protection mechanism was disabled.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Jenkins
Published
2025-10-29
Last Modified
2026-02-24
References
https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3326 https://access.redhat.com/security/cve/cve-2025-64135
Patch
https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3326
Share on: