CVE-2022-25210

—

CVSS 3.1

6.5 medium

EPSS

<1%p55

Published

Feb 15, 2022 (Feb 15, 2022)

Modified

Jun 17, 2026

Description

Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier uses static fields to store job configuration information, allowing attackers with Item/Configure permission to capture passwords of the jobs that will be configured.

Vendors: jenkins
Products: convertigo mobile platform
Weakness: CWE-662
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.