CVE-2025-53656

The Jenkins ReadyAPI Functional Testing Plugin (version 1.11 and earlier) stores sensitive information—including SLM License Access Keys , client secrets , and passwords —unencrypted in the config.xml files on the Jenkins controller. This security flaw allows any user with Item/Extended Read perm...

CVE-2025-53657

The Jenkins ReadyAPI Functional Testing Plugin (version 1.11 and earlier ) fails to properly mask sensitive information, specifically SLM License Access Keys , client secrets , and passwords , on the job configuration form. Additionally, the plugin stores these credentials unencrypted in the conf...