2 matches found
CVE-2025-53667
Jenkins Dead Man's Snitch Plugin 0.1 does not mask Dead Man's Snitch tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them...
0.00313EPSS
SaveExploits0References1
CVE-2025-53667
The Jenkins Dead Man's Snitch Plugin 0.1 is vulnerable to Insufficiently Protected Credentials (CWE-522) because it fails to mask sensitive tokens on the job configuration form. Additionally, tokens are stored in an unencrypted form within the config.xml file. An attacker can observe these expose...
5.3CVSS6.5AI score0.00313EPSS
SaveExploits0References2Affected Software1
20