CVE-2024-9453

A vulnerability was found in Red Hat OpenShift Jenkins. The bearer token is not obfuscated in the logs and potentially carries a high risk if those logs are centralized when collected. The token is typically valid for one year. This flaw allows a malicious user to jeopardize the environment if they have access to sensitive information.

• CWE-532

• https://access.redhat.com/security/cve/CVE-2024-9453Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2316231Issue Tracking, Vendor Advisory

Published

Jul 4, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-9447An information disclosure vulnerability exists in the latest…6.5
• CVE-2024-9448On affected platforms running Arista EOS with Traffic Polici…7.5
• CVE-2024-9449The Auto iFrame plugin for WordPress is vulnerable to Stored…6.4
• CVE-2024-9450The Free Booking Plugin for Hotels, Restaurants and Car Rent…6.5
• CVE-2024-9451The Embed PDF Viewer plugin for WordPress is vulnerable to S…6.4
• CVE-2024-9452The Branding plugin for WordPress is vulnerable to Stored Cr…5.4
• CVE-2024-9454The PriPre plugin for WordPress is vulnerable to Stored Cros…6.4
• CVE-2024-9455The WP Cleanup and Basic Functions plugin for WordPress is v…6.4
• CVE-2024-9456The WP Awesome Login plugin for WordPress is vulnerable to S…6.4
• CVE-2024-9457The WP Builder plugin for WordPress is vulnerable to Stored …5.4
• CVE-2024-9458The Reservit Hotel WordPress plugin before 3.0 does not sani…4.8
• CVE-2024-9459Zohocorp ManageEngine Exchange Reporter Plus versions 5718 a…8.8