← volver
CVE-2025-53671

CVE-2025-53671

CVSS 6.5 MEDIUMEPSS 0.2%CWE-256CWE-522
Jenkins Nouvola DiveCloud Plugin 1.08 and earlier does not mask DiveCloud API Keys and Credentials Encryption Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Productos afectados
Jenkins Project · Jenkins Nouvola DiveCloud Plugin

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3526http://www.openwall.com/lists/oss-security/2025/07/09/4