← Back

Openshift Pipeline

openshift_pipeline

Vendor: Jenkins • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-64143
1Jenkins
1Openshift Pipeline
Jun 17, 2026
Oct 29, 2025
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or acce...Show more
Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system.Show less
CVE-2020-2167
1Jenkins
1Openshift Pipeline
Jun 17, 2026
Mar 25, 2020
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Jenkins OpenShift Pipeline Plugin 1.0.56 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.