1. Home
  2. CVE Database
  3. CVE-2026-57287
MEDIUM · 4.3

CVE-2026-57287

Jenkins Job Configuration History Plugin 1356.ve360da_6c523a_ and earlier does not redact the encrypted values of secrets when displaying historical job and agent configurations, allowing attackers wi...

Vulnerability Description

Jenkins Job Configuration History Plugin 1356.ve360da_6c523a_ and earlier does not redact the encrypted values of secrets when displaying historical job and agent configurations, allowing attackers with Extended Read permission to view encrypted secret values that would otherwise be redacted.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
JenkinsJob Configuration History<= 1356.ve360da_6c523a

Related Weaknesses (CWE)

CWE-312

References

FAQ

What is CVE-2026-57287?

CVE-2026-57287 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Jenkins Job Configuration History Plugin 1356.ve360da_6c523a_ and earlier does not redact the encrypted values of secrets when displaying historical job and agent configurations, allowing attackers wi...

How severe is CVE-2026-57287?

CVE-2026-57287 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-57287?

Check the references section above for vendor advisories and patch information. Affected products include: Jenkins Job Configuration History.