CVE-2025-53655 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Jenkins Statistics Gatherer Plugin 2.0.3 and earlier does not mask the AWS Secret Key on the global configuration form, increasing the potential for attackers t…
Medium CVSS: 5.3

CVE-2025-53655

Jenkins Statistics Gatherer Plugin 2.0.3 and earlier does not mask the AWS Secret Key on the global configuration form, increasing the potential for attackers to observe and capture it.
Vendor
Jenkins
Product
Statistics Gatherer
CWE
CWE-256
Yayın Tarihi
2025-07-09 16:15:24
Güncelleme
2025-11-04 22:16:22
Source Identifier
jenkinsci-cert@googlegroups.com
KEV Date Added
-

Kategoriler

CWE-256 Statistics Gatherer MEDIUM Jenkins 2025

Referanslar

https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3554 http://www.openwall.com/lists/oss-security/2025/07/09/4