CVE-2025-53674

Published: Jul 9, 2025Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Jenkins Sensedia Api Platform tools Plugin 1.0 does not mask the Sensedia API Manager integration token on the global configuration form, increasing the potential for attackers to observe and capture it.

Affected (1)

Products: Jenkins: Sensedia Api Platform Tools

Jenkins

1 product

Sensedia Api Platform Tools

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jenkins Sensedia Api Platform Tools	Version 1.0

Related CWEs

CWE-256

Plaintext Storage of a Password

Storing a password in plaintext may result in a system compromise.

References (2)

https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3551

Source: jenkinsci-cert@googlegroups.com

Vendor Advisory

http://www.openwall.com/lists/oss-security/2025/07/09/4

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.