← voltar
CVE-2025-53657

CVE-2025-53657

CVSS 4.3 MEDIUMEPSS 0.2%CWE-522
Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier does not mask SLM License Access Keys, client secrets, and passwords displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Jenkins Project · Jenkins ReadyAPI Functional Testing Plugin

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3556http://www.openwall.com/lists/oss-security/2025/07/09/4