CVE-2025-0142 Zoom Jenkins Marketplace plugin - Cleartext Storage of Sensitive Information
An authenticated user can disclose sensitive information stored in cleartext within the Zoom Jenkins Marketplace plugin.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-0142?
CVE-2025-0142 is a medium-severity vulnerability in Zoom Jenkins Marketplace plugin, published on 30 Jan 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Cleartext storage of sensitive information in the Zoom Jenkins Marketplace plugin before version 1.4 may allow an authenticated user to conduct a disclosure of information via network access.
Weakness: CWE-312
Which versions are affected by CVE-2025-0142?
2 open source packages ship an affected version, including io.jenkins.plugins:zoom.
| Package | Affected | Fixed in |
|---|---|---|
io.jenkins.plugins:zoom Maven | All versions | 1.4 |
io.jenkins.plugins:zoom Maven | All versions | 1.4 |
How do I fix CVE-2025-0142?
Upgrade io.jenkins.plugins:zoom to 1.4 or later.
Is CVE-2025-0142 being exploited?
There is no known exploitation of CVE-2025-0142 in the wild and no public exploit code.
Sources
Also known as GHSA-jx45-xp6q-cwjc.