July 26, 2026

CVE Watchtower


← Back to CVE List

CVE-2025-64148NVD

Vulnerability Summary

A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Severity Level
UNKNOWN
Published Date
Oct 29, 2025
Last Modified
Oct 29, 2025
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
N/A

External References