CVE-2025-64145CWE-311

CVE-2025-64145

Medium · published October 29, 2025

CVSS v3.1

4.3

EPSS

Percentile

6.4

In the wild

Unconfirmed

What it is

Jenkins ByteGuard Build Actions Plugin 1.0 does not mask API tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

The record

Technical detail

CVSS v3.1: 4.3 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.00173 · 6.4th percentile
Weakness: CWE-311 · Missing Encryption of Sensitive Data
Published: 2025-10-29T18:15Z

Affected products (1)

Product	Versions	Fixed in
jenkins/byteguard_build_actions	all versions	—

References (2)

https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3560 · [email protected]http://www.openwall.com/lists/oss-security/2025/10/29/2 · af854a3a-2127-422b-91ae-364da2661108

EPSS history

Timeline

29 OCT 13:29Z
Jenkins ByteGuard Build Actions Plugin 1.0 does not mask API tokens displayed on the job configuration form, increasing the potential for attackers to observe…
cvelistv5