CVE-2025-53654 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Jenkins Statistics Gatherer Plugin 2.0.3 and earlier stores the AWS Secret Key unencrypted in its global configuration file on the Jenkins controller, where it…
Medium CVSS: 6.5

CVE-2025-53654

Jenkins Statistics Gatherer Plugin 2.0.3 and earlier stores the AWS Secret Key unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system.
Vendor
Jenkins
Product
Statistics Gatherer
CWE
CWE-522
Yayın Tarihi
2025-07-09 16:15:24
Güncelleme
2025-11-04 22:16:22
Source Identifier
jenkinsci-cert@googlegroups.com
KEV Date Added
-

Kategoriler

CWE-522 Statistics Gatherer MEDIUM Jenkins 2025

Referanslar

https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3554 http://www.openwall.com/lists/oss-security/2025/07/09/4