CVE-2025-58460 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A missing permission check in Jenkins OpenTelemetry Plugin 3.1543.v8446b_92b_cd64 and earlier allows attackers with Overall/Read permission to connect to an att…
Medium CVSS: 4.2

CVE-2025-58460

A missing permission check in Jenkins OpenTelemetry Plugin 3.1543.v8446b_92b_cd64 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Vendor
Jenkins
Product
Opentelemetry
CWE
CWE-862
Yayın Tarihi
2025-09-03 15:15:39
Güncelleme
2025-11-04 22:16:34
Source Identifier
jenkinsci-cert@googlegroups.com
KEV Date Added
-

Kategoriler

CWE-862 Opentelemetry MEDIUM Jenkins 2025

Referanslar

https://www.jenkins.io/security/advisory/2025-09-03/#SECURITY-3602 http://www.openwall.com/lists/oss-security/2025/09/03/4