CVE-2025-67638 — Jenkins Project / Jenkins

CVE-2025-67638

Jenkins Project / Jenkins PUBLISHED

Description (CNA)

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

Affected (CNA)

Vendor / product	Versions
Jenkins Project / Jenkins	unaffected 2.541 before ; unaffected 2.528.3 before 2.528.

CWE

No CWE identifiers supplied.

References

https://www.jenkins.io/security/advisory/2025-12-10/#SECURITY-783

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.