CVE-2025-53675 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Jenkins Warrior Framework Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by use…
Medium CVSS: 6.5

CVE-2025-53675

Jenkins Warrior Framework Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
Vendor
Jenkins
Product
Warrior Framework
CWE
CWE-256
Yayın Tarihi
2025-07-09 16:15:27
Güncelleme
2025-11-04 22:16:25
Source Identifier
jenkinsci-cert@googlegroups.com
KEV Date Added
-

Kategoriler

CWE-256 Warrior Framework MEDIUM Jenkins 2025

Referanslar

https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3516 http://www.openwall.com/lists/oss-security/2025/07/09/4