Missing password field masking in Zoom Jenkins Marketplace plugin - CVE-2025-0148
Published: March 17, 2025
Vulnerability identifier: #VU105771
CSH Severity: Low
CVSS v4: 2.4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-0148
CWE-ID: CWE-549
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an attacker to view the password.
The vulnerability exists due to the application does not mask password on the web page. An attacker can observe the password entered into the password field.
Affected software
Zoom Jenkins Marketplace plugin
How to mitigate CVE-2025-0148
Install updates from vendor's website.
Zoom Jenkins Marketplace plugin - update to 1.6