Jenkins Project Jenkins OpenShift Pipeline Plugin

• CVE-2025-64143 Medium 4.3 Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read 0.2%
• CVE-2020-2167 Unrated Jenkins OpenShift Pipeline Plugin 1.0.56 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability. 2.1%