Miggo Logo
Miggo Vulnerability Database
→
CVE-2025-64140

CVE-2025-64140: Jenkins Azure CLI Plugin does not restrict the commands it executes

8.8

CVSS Score
3.1

Basic Information

CVE ID
CVE-2025-64140
GHSA ID
GHSA-rh72-238f-g26q
EPSS Score
-
CWE
CWE-78
Published
10/29/2025
Updated
10/29/2025
KEV Status
No
Technology
TechnologyJava

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Package NameEcosystemVulnerable VersionsFirst Patched Version
org.jenkins-ci.plugins:azure-climaven<= 0.9

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

J*nkins *zur* *LI Plu*in *.* *n* **rli*r *o*s not r*stri*t w*i** *omm*n*s it *x**ut*s on t** J*nkins *ontroll*r. T*is *llows *tt**k*rs wit* It*m/*on*i*ur* p*rmission to *x**ut* *r*itr*ry s**ll *omm*n*s on t** J*nkins *ontroll*r. *s o* pu*li**tion o

Reasoning

No *n*lysis *v*il**l*