PT-2026-26076

CVE-2026-33004

·

Published

2026-03-18

·

Updated

2026-03-21

Description by

CVSS 3.1
4.3
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Jenkins LoadNinja Plugin versions 2.1 and earlier
Description The Jenkins LoadNinja Plugin does not properly mask LoadNinja API keys as they are displayed on the job configuration form. This could allow attackers to observe and capture these keys.
Recommendations Update to a newer version of the Jenkins LoadNinja Plugin that addresses this issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-312: Cleartext Storage of Sensitive Information
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Related identifiers
CVE-2026-33004
BDU:2026-04248
GHSA-P9HG-WRMV-V8CP
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com