Threats tagged 'ghsa-vmm2-53rc-43v3'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.2%	CVE-2025-64145Io.jenkins.plugins:byteguard build actions: Jenkins ByteGuard Build Actions Plugin does not mask API tokens displayed Medium4.3EPSS 0.2%2025-10-29GCVE DatabaseCVE-2025-64145 The Jenkins ByteGuard Build Actions Plugin version 1.0 and earlier stores API tokens unencrypted in job configuration files on the Jenkins controller. These tokens are visible to users with Item/Extended Read permission or those with file system access to the Jenkins controller. The plugin's job configuration form also does not mask these credentials, increasing the risk of token exposure. No fix is currently available for this vulnerability. EPSS 0.2%Report on CVE-2025-64145 Vulnerability CWE-311 #ghsa-vmm2-53rc-43v3 #maven	GCVE Database	2025-10-29

Page 1 of 1