CVE-2025-53675

Jenkins Warrior Framework Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2025-53676

Jenkins Xooa Plugin 0.0.7 and earlier stores the Xooa Deployment Token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system...

CVE-2025-53676

Jenkins Xooa Plugin 0.0.7 and earlier stores the Xooa Deployment Token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system...

CVE-2025-53675

The CVE-2025-53675 entry describes a vulnerability in the Jenkins Warrior Framework Plugin (versions 1.2 and earlier) where passwords are stored unencrypted in job config.xml on the Jenkins controller. This allows users with Item/Extended Read permission or access to the Jenkins controller filesy...

CVE-2025-53676

Summary: CVE-2025-53676 affects the Jenkins Xooa Plugin (versions in the 0.0.7 line and earlier). Affected software: Jenkins Xooa Plugin 0.0.7 and earlier. The issue is stored deployment tokens are kept unencrypted in the plugin’s global configuration file on the Jenkins controller, exposing them...

CVE-2025-53673

Jenkins Sensedia Api Platform tools Plugin 1.0 stores the Sensedia API Manager integration token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system...

CVE-2025-53673

CVE-2025-53673 affects the Jenkins Sensedia Api Platform Tools Plugin (version 1.0). The issue is that the Sensedia API Manager integration token is stored unencrypted in the plugin’s global configuration file on the Jenkins controller, specifically viewable by users with access to the controller...

CVE-2025-53672

The CVE-2025-53672 affects Jenkins Kryptowire Plugin 0.2 and earlier. It stores the Kryptowire API key unencrypted in the plugin’s global configuration file on the Jenkins controller, enabling access to the key by users with file-system access to the Jenkins controller. This is the stated root ca...

CVE-2025-53672

Jenkins Kryptowire Plugin 0.2 and earlier stores the Kryptowire API key unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system...

CVE-2025-53672

Jenkins Kryptowire Plugin 0.2 and earlier stores the Kryptowire API key unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system...

CVE-2025-53670

Jenkins Nouvola DiveCloud Plugin 1.08 and earlier stores DiveCloud API Keys and Credentials Encryption Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2025-53670

The CVE-2025-53670 entry applies to Jenkins Nouvola DiveCloud Plugin, affected versions prior to 1.09. The underlying issue is that DiveCloud API Keys and Credentials Encryption Keys are stored unencrypted in job config.xml files on the Jenkins controller, making them readable by users with Item/...

CVE-2025-53668

The CVE concerns Jenkins VAddy Plugin prior to 1.2.9. The plugin stores Vaddy API Auth Keys unencrypted in job config.xml files on the Jenkins controller, enabling access by users with Item/Extended Read permission or anyone with filesystem access to the controller. The root cause is unencrypted ...

CVE-2025-53668

Jenkins VAddy Plugin 1.2.8 and earlier stores Vaddy API Auth Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2025-53668

Jenkins VAddy Plugin 1.2.8 and earlier stores Vaddy API Auth Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2025-53666

Jenkins Dead Man's Snitch Plugin 0.1 stores Dead Man's Snitch tokens unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2025-53666

CVE-2025-53666 affects Jenkins Dead Man's Snitch Plugin 0.1. The plugin stores Dead Man's Snitch tokens unencrypted in job config.xml files on the Jenkins controller, enabling viewing by users with Item/Extended Read permission or access to the controller filesystem. This is corroborated by multi...

CVE-2025-53663

Jenkins IBM Cloud DevOps Plugin 2.0.16 and earlier stores SonarQube authentication tokens unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2025-53664

Jenkins Apica Loadtest Plugin 1.10 and earlier stores Apica Loadtest LTP authentication tokens unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2025-53663

CVE-2025-53663 affects Jenkins IBM Cloud DevOps Plugin (versions 2.0.16 and earlier). The vulnerability arises from unencrypted storage of SonarQube authentication tokens in job config.xml on the Jenkins controller, enabling access by users with Item/Extended Read permission or with filesystem ac...