CVE-2025-64135 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Jenkins Eggplant Runner Plugin 0.0.1.301.v963cffe8ddb_8 and earlier sets the Java system property `jdk.http.auth.tunneling.disabledSchemes` to an empty value, d…
Medium CVSS: 5.9

CVE-2025-64135

Jenkins Eggplant Runner Plugin 0.0.1.301.v963cffe8ddb_8 and earlier sets the Java system property `jdk.http.auth.tunneling.disabledSchemes` to an empty value, disabling a protection mechanism of the Java runtime.
Vendor
Jenkins
Product
Eggplant Runner
CWE
CWE-1188
Yayın Tarihi
2025-10-29 14:15:57
Güncelleme
2025-12-22 15:23:37
Source Identifier
jenkinsci-cert@googlegroups.com
KEV Date Added
-

Kategoriler

CWE-1188 Eggplant Runner MEDIUM Jenkins 2025

Referanslar

https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3326 http://www.openwall.com/lists/oss-security/2025/10/29/2