PT-2026-51797 · Jenkins · Job Configuration History Plugin
CVE-2026-57287
·
Published
2026-06-24
·
Updated
2026-06-24
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Jenkins Job Configuration History Plugin versions prior to 1356.ve360da 6c523a
Description
The plugin fails to redact encrypted secret values when displaying historical job and agent configurations. This allows users with Extended Read permission to view encrypted secrets that should remain hidden.
Recommendations
Update Jenkins Job Configuration History Plugin to a version later than 1356.ve360da 6c523a .
Fix
Cleartext Storage of Sensitive Information
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Job Configuration History Plugin