CVE-2022-25210: Jenkins Convertigo Mobile Platform

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier uses static fields to store job configuration information, allowing attackers with Item/Configure permission to capture passwords of the jobs that will be configured.

Affected products

• Jenkins Convertigo Mobile Platform: up to and including 1.1

Published 2022-02-15. Last modified 2026-06-17.