CVE-2025-53665

Published: Jul 9, 2025Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Jenkins Apica Loadtest Plugin 1.10 and earlier does not mask Apica Loadtest LTP authentication tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

Affected (1)

Products: Jenkins: Apica Loadtest

Jenkins

1 product

Apica Loadtest

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jenkins Apica Loadtest	Up to 1.10

Related CWEs

CWE-256

Plaintext Storage of a Password

Storing a password in plaintext may result in a system compromise.

References (2)

https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3540

Source: jenkinsci-cert@googlegroups.com

Vendor Advisory

http://www.openwall.com/lists/oss-security/2025/07/09/4

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.