CVEvulnerability
CVE-2025-53655
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-07-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-256
Description
Jenkins Statistics Gatherer Plugin 2.0.3 and earlier does not mask the AWS Secret Key on the global configuration form, increasing the potential for attackers to observe and capture it.
Affected configurations
• jenkins statistics gatherer (<= 2.0.3)
Related
Weakness · CWE (1)
- CWE-256 Plaintext Storage of a Password weakness
References
- https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3554 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2025/07/09/4 www.openwall.com