Jenkins Dead Man's Snitch Plugin vulnerability does not mask tokens

Jenkins Dead Man's Snitch Plugin 0.1 does not mask Dead Man's Snitch tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them...

CVE-2025-53666

The Jenkins Dead Man's Snitch Plugin version 0.1 contains a vulnerability where Dead Man's Snitch tokens are stored in an unencrypted format within the config.xml files on the Jenkins controller. This flaw allows for information disclosure , as the tokens can be viewed by any user possessing Item...

PT-2025-28918 · Jenkins · Jenkins Dead Man'S Snitch Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Dead Man's Snitch Plugin version 0.1 Description: The Jenkins Dead Man's Snitch Plugin version 0.1 stores Dead Man's Snitch tokens unencrypted in job config.xml files on the Jenkins controller. This allows users with Item/Extended Rea...

PT-2025-28919 · Jenkins · Jenkins Dead Man'S Snitch Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Dead Man's Snitch Plugin version 0.1 Description: The Jenkins Dead Man's Snitch Plugin does not mask Dead Man's Snitch tokens displayed on the job configuration form, potentially allowing attackers to observe and capture them...