Missing Password Field Masking
CVE-2025-30197
Summary
Jenkins Zoho QEngine Plugin 1.0.29.vfa_cc23396502 and earlier does not mask the QEngine API Key form field, increasing the potential for attackers to observe and capture it.
- HIGH
- NETWORK
- NONE
- UNCHANGED
- REQUIRED
- NONE
- LOW
- NONE
CWE-549 - Missing Password Field Masking
The software does not mask passwords during entry, increasing the potential for attackers to observe and capture passwords.
References
Advisory Timeline
- Published
