CVE-2025-53678: Missing Encryption of Sensitive Data

Jenkins User1st uTester Plugin 1.1 and earlier stores the uTester JWT token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system...

PT-2025-28930 · Jenkins · Jenkins User1St Utester Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins User1st uTester Plugin versions 1.1 and earlier Description: The Jenkins User1st uTester Plugin stores the uTester JWT JSON Web Token token unencrypted in its global configuration file on the Jenkins controller. This allows users with...