CVEvulnerability
CVE-2025-53665
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-07-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-256
Description
Jenkins Apica Loadtest Plugin 1.10 and earlier does not mask Apica Loadtest LTP authentication tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
Affected configurations
• jenkins apica loadtest (<= 1.10)
Related
Weakness · CWE (1)
- CWE-256 Plaintext Storage of a Password weakness
References
- https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3540 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2025/07/09/4 www.openwall.com