Lucene search
+L

7 matches found

osv_ghsa
osv_ghsa
•added 2025/07/09 6:30 p.m.•110 views

GHSA-JXWJ-QCCF-4896 Jenkins IFTTT Build Notifier Plugin vulnerability exposes IFTTT Maker Channel Keys

Jenkins IFTTT Build Notifier Plugin 1.2 and earlier stores IFTTT Maker Channel Keys unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These keys can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system. As ...

4.3CVSS6.6AI score0.00394EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2025/07/09 4:15 p.m.•25 views

CVE-2025-53662

Jenkins IFTTT Build Notifier Plugin 1.2 and earlier stores IFTTT Maker Channel Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

6.5CVSS6.6AI score0.00394EPSS
SaveExploits0References2
Mend
Mend
•added 2025/07/09 3:39 p.m.•12 views

CVE-2025-53662

Jenkins IFTTT Build Notifier Plugin 1.2 and earlier stores IFTTT Maker Channel Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

7.1CVSS6.6AI score0.00394EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/07/09 3:39 p.m.•7 views

CVE-2025-53662

Jenkins IFTTT Build Notifier Plugin 1.2 and earlier stores IFTTT Maker Channel Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

6.6AI score0.00394EPSS
SaveExploits0References1
Jenkins Security Advisories
Jenkins Security Advisories
•added 2025/07/09 12:00 a.m.•20 views

Keys stored in plain text by ifttt-build-notifier

ifttt-build-notifier 1.2 and earlier stores IFTTT Maker Channel Keys unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These keys can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system. As of publication ...

6.5CVSS6.6AI score0.00394EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/07/09 12:00 a.m.•21 views

Jenkins Plugin IFTTT Build Notifier Security Vulnerability

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. Jenkins plugin A...

6.5CVSS6.5AI score0.00394EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/09 12:00 a.m.•10 views

CVE-2025-53662: Plaintext Storage of a Password

Jenkins IFTTT Build Notifier Plugin 1.2 and earlier stores IFTTT Maker Channel Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

6.5CVSS6.6AI score0.00394EPSS
SaveExploits0References1
Rows per page
Query Builder