CVEvulnerability
CVE-2025-53674
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-07-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-256
Description
Jenkins Sensedia Api Platform tools Plugin 1.0 does not mask the Sensedia API Manager integration token on the global configuration form, increasing the potential for attackers to observe and capture it.
Affected configurations
• jenkins sensedia api platform tools 1.0
Related
Weakness · CWE (1)
- CWE-256 Plaintext Storage of a Password weakness
References
- https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3551 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2025/07/09/4 www.openwall.com