Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/07/11 3:42 p.m.10 views

CVE-2025-53673

Jenkins Sensedia Api Platform tools Plugin 1.0 stores the Sensedia API Manager integration token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system...

6.5CVSS7AI score0.00105EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2025/07/09 6:30 p.m.8 views

Jenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokens in its global configuration file

Jenkins Sensedia Api Platform tools Plugin 1.0 stores the Sensedia API Manager integration token unencrypted in its global configuration file com.sensedia.configuration.SensediaApiConfiguration.xml on the Jenkins controller as part of its configuration. This token can be viewed by users with acce...

6.5CVSS6.2AI score0.00105EPSS
Exploits0References4Affected Software1
Snyk
Snyk
added 2025/07/09 4:48 p.m.2 views

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials in the global configuration form where the integration token is not properly masked. An attacker can obtain sensitive authentication credentials by viewing the configuration interface. Remediation...

5.3CVSS7.1AI score0.00094EPSS
Exploits0References2
OSV
OSV
added 2025/07/09 4:15 p.m.1 views

CVE-2025-53674

Jenkins Sensedia Api Platform tools Plugin 1.0 does not mask the Sensedia API Manager integration token on the global configuration form, increasing the potential for attackers to observe and capture it...

5.3CVSS5.8AI score0.00094EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/07/09 3:39 p.m.2 views

CVE-2025-53673

Jenkins Sensedia Api Platform tools Plugin 1.0 stores the Sensedia API Manager integration token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system...

7AI score0.00105EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/07/09 12:0 a.m.2 views

PT-2025-28926 · Jenkins · Jenkins Sensedia Api Platform Tools Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Sensedia Api Platform Tools Plugin version 1.0 Description: The Jenkins Sensedia Api Platform Tools Plugin does not mask the Sensedia API Manager integration token on the global configuration form, potentially allowing attackers to...

5.3CVSS6.2AI score0.00094EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/07/09 12:0 a.m.3 views

PT-2025-28925 · Jenkins · Jenkins Sensedia Api Platform Tools Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Sensedia Api Platform Tools Plugin version 1.0 Description: The Jenkins Sensedia Api Platform Tools Plugin stores the Sensedia API Manager integration token unencrypted in its global configuration file on the Jenkins controller. This...

6.8CVSS6.1AI score0.00105EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/07/09 12:0 a.m.1 views

Jenkins plugin Sensedia Api Platform tools 安全漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...

6.5CVSS6.2AI score0.00105EPSS
Exploits0References2
Rows per page
Query Builder