Jenkins Dead Man's Snitch Plugin vulnerability does not mask tokens

Jenkins Dead Man's Snitch Plugin 0.1 does not mask Dead Man's Snitch tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them...

CVE-2025-53667

Jenkins Dead Man's Snitch Plugin 0.1 does not mask Dead Man's Snitch tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them...

CVE-2025-53666

Jenkins Dead Man's Snitch Plugin 0.1 stores Dead Man's Snitch tokens unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2025-53666

The Jenkins Dead Man's Snitch Plugin 0.1 is vulnerable to Missing Encryption of Sensitive Data (CWE-311). The plugin stores Dead Man's Snitch tokens in unencrypted plain text within config.xml files on the Jenkins controller. This allows users with Item/Extended Read permission or those with dire...

PT-2025-28918 · Jenkins · Jenkins Dead Man'S Snitch Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Dead Man's Snitch Plugin version 0.1 Description: The Jenkins Dead Man's Snitch Plugin version 0.1 stores Dead Man's Snitch tokens unencrypted in job config.xml files on the Jenkins controller. This allows users with Item/Extended Rea...

CVE-2025-53667: Insufficiently Protected Credentials

Jenkins Dead Man's Snitch Plugin 0.1 does not mask Dead Man's Snitch tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them...

CVE-2025-53666: Missing Encryption of Sensitive Data

Jenkins Dead Man's Snitch Plugin 0.1 stores Dead Man's Snitch tokens unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

PT-2025-28919 · Jenkins · Jenkins Dead Man'S Snitch Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Dead Man's Snitch Plugin version 0.1 Description: The Jenkins Dead Man's Snitch Plugin does not mask Dead Man's Snitch tokens displayed on the job configuration form, potentially allowing attackers to observe and capture them...