PT-2025-3757 · Zoom · Zoom Jenkins Marketplace Plugin

Published 2025-02-03 · Updated 2025-02-26 · CVE-2025-0148

Positive Technologies (AI Summary)

CVSS v3.1

2.6

Low

Base vector

AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Zoom Jenkins Marketplace plugin version 1.6 and earlier

Description The issue concerns missing password field masking in the Zoom Jenkins Marketplace plugin, which may allow an unauthenticated user to conduct a disclosure of information via adjacent network access.

Recommendations For Zoom Jenkins Marketplace plugin version 1.6 and earlier, update to version 1.6 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-549

Related Identifiers

CVE-2025-0148

GHSA-4352-JXWG-88RM

Affected Products

Zoom Jenkins Marketplace Plugin

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-0148 · Security Note
• https://osv.dev/vulnerability/GHSA-4352-jxwg-88rm · Vendor Advisory
• https://github.com/jenkinsci/zoom-plugin · Note
• https://twitter.com/CVEnew/status/1886553605596987612 · Twitter Post
• https://zoom.com/en/trust/security-bulletin/zsb-25007 · Note
• https://t.me/cvedetector/17141 · Telegram Post
• https://t.me/cvenotify/109792 · Telegram Post
• https://twitter.com/attritionorg/status/1894882239923789997 · Twitter Post