Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-9453 EUVD-2024-54727GHSA-36fm-f9h6-j5xh

Jenkins-image: sensitive data disclosure when using openshift jenkins image

Published Jul 4, 2025 · Updated Dec 12, 2025 · Assigned by redhat

Description

A vulnerability was found in Red Hat OpenShift Jenkins. The bearer token is not obfuscated in the logs and potentially carries a high risk if those logs are centralized when collected. The token is typically valid for one year. This flaw allows a malicious user to jeopardize the environment if they have access to sensitive information.

Affected products

VendorProductAffectedFixed
Jenkins openshift-sync-plugin < 1.1.0.818.v3883b_3b_df89a_ 1.1.0.818.v3883b_3b_df89a_
Red Hat OpenShift Developer Tools and Services — —

References