CVE-2025-53671 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Jenkins Nouvola DiveCloud Plugin 1.08 and earlier does not mask DiveCloud API Keys and Credentials Encryption Keys displayed on the job configuration form, incr…
Medium CVSS: 6.5

CVE-2025-53671

Jenkins Nouvola DiveCloud Plugin 1.08 and earlier does not mask DiveCloud API Keys and Credentials Encryption Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
Vendor
Jenkins
Product
Nouvola Divecloud
CWE
CWE-256
Yayın Tarihi
2025-07-09 16:15:26
Güncelleme
2025-11-04 22:16:25
Source Identifier
jenkinsci-cert@googlegroups.com
KEV Date Added
-

Kategoriler

CWE-256 Nouvola Divecloud MEDIUM Jenkins 2025

Referanslar

https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3526 http://www.openwall.com/lists/oss-security/2025/07/09/4