← voltar
CVE-2025-53671

CVE-2025-53671

CVSS 6.5 MEDIUMEPSS 0.2%CWE-256CWE-522
Jenkins Nouvola DiveCloud Plugin 1.08 and earlier does not mask DiveCloud API Keys and Credentials Encryption Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Jenkins Project · Jenkins Nouvola DiveCloud Plugin

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3526http://www.openwall.com/lists/oss-security/2025/07/09/4