CVE-2025-53676

The Jenkins Xooa Plugin version 0.0.7 and earlier is vulnerable to information disclosure due to the unencrypted storage of the Xooa Deployment Token . This token is stored in the global configuration file (io.jenkins.plugins.xooa.GlobConfig.xml) on the Jenkins controller. Consequently, any user ...

CVE-2025-53674

Jenkins Sensedia Api Platform tools Plugin 1.0 does not mask the Sensedia API Manager integration token on the global configuration form, increasing the potential for attackers to observe and capture it...

CVE-2025-53674

The Jenkins Sensedia Api Platform tools Plugin 1.0 is vulnerable to information disclosure because it fails to mask the Sensedia API Manager integration token on the global configuration form. Additionally, the plugin stores these tokens in an unencrypted format within the file com.sensedia.confi...

CVE-2025-53673

Jenkins Sensedia Api Platform tools Plugin 1.0 stores the Sensedia API Manager integration token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system...

CVE-2025-53673

The Jenkins Sensedia Api Platform tools Plugin 1.0 contains a vulnerability where it stores the Sensedia API Manager integration token unencrypted in the global configuration file com.sensedia.configuration.SensediaApiConfiguration.xml on the Jenkins controller. This allows users with access to t...

CVE-2025-53671

Jenkins Nouvola DiveCloud Plugin 1.08 and earlier does not mask DiveCloud API Keys and Credentials Encryption Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them...

CVE-2025-53671

Jenkins Nouvola DiveCloud Plugin 1.08 and earlier does not mask DiveCloud API Keys and Credentials Encryption Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them...

CVE-2025-53670

The Jenkins Nouvola DiveCloud Plugin versions 1.08 and earlier contains a vulnerability where DiveCloud API Keys and Credentials Encryption Keys are stored in an unencrypted format within job config.xml files on the Jenkins controller. This lack of encryption allows unauthorized access to sensiti...

CVE-2025-53668

The Jenkins VAddy Plugin version 1.2.8 and earlier contains a vulnerability where Vaddy API Auth Keys are stored unencrypted in job config.xml files on the Jenkins controller. This flaw allows users with Item/Extended Read permissions, or anyone with access to the Jenkins controller file system, ...

CVE-2025-53669

Jenkins VAddy Plugin 1.2.8 and earlier does not mask Vaddy API Auth Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them...

CVE-2025-53667

The Jenkins Dead Man's Snitch Plugin version 0.1 is vulnerable to information disclosure because it fails to mask Dead Man's Snitch tokens on the job configuration form. Additionally, the plugin stores these tokens in unencrypted form within the config.xml file. These flaws allow attackers with s...

CVE-2025-53667

Jenkins Dead Man's Snitch Plugin 0.1 does not mask Dead Man's Snitch tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them...

CVE-2025-53665

The Jenkins Apica Loadtest Plugin (version 1.10 and earlier ) contains a vulnerability that fails to mask Apica Loadtest LTP authentication tokens on the job configuration form, potentially allowing attackers to observe and capture them. Furthermore, these tokens are stored unencrypted in the con...

CVE-2025-53663

Jenkins IBM Cloud DevOps Plugin 2.0.16 and earlier stores SonarQube authentication tokens unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2025-53664

Jenkins Apica Loadtest Plugin 1.10 and earlier stores Apica Loadtest LTP authentication tokens unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2025-53663

Jenkins IBM Cloud DevOps Plugin 2.0.16 and earlier stores SonarQube authentication tokens unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2025-53662

Jenkins IFTTT Build Notifier Plugin 1.2 and earlier stores IFTTT Maker Channel Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2025-53662

Jenkins IFTTT Build Notifier Plugin 1.2 and earlier stores IFTTT Maker Channel Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2025-53661

Jenkins Testsigma Test Plan run Plugin 1.6 and earlier does not mask Testsigma API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them...

CVE-2025-53660

Jenkins QMetry Test Management Plugin 1.13 and earlier does not mask Qmetry Automation API Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them...