← volver
CVE-2025-53657

CVE-2025-53657

CVSS 4.3 MEDIUMEPSS 0.2%CWE-522
Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier does not mask SLM License Access Keys, client secrets, and passwords displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Productos afectados
Jenkins Project · Jenkins ReadyAPI Functional Testing Plugin

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3556http://www.openwall.com/lists/oss-security/2025/07/09/4