Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins LoadNinja Plugin — Jenkins Security Advisory 2026-03-18 Clear all filters
TI-2026-25452 CVE-2026-33004 · GHSA-p9hg-wrmv-v8cp

Information disclosure in Jenkins LoadNinja Plugin

Priority LOW 20

Jenkins LoadNinja Plugin 2.1 and earlier does not mask LoadNinja API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0023 Published 2026-03-18 Fixed in 2.2 CWE-200
TI-2026-25451 CVE-2026-33003 · GHSA-qqjr-hf5h-jx3q

Cleartext storage of sensitive information in Jenkins LoadNinja Plugin

Priority LOW 19

Jenkins LoadNinja Plugin 2.1 and earlier stores LoadNinja API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenki…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00151 Published 2026-03-18 Fixed in 2.2 CWE-312