Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier does not mask SLM License Access Keys, client secrets, and passwords displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3556 | Vendor Advisory |
Configurations
History
18 Jul 2025, 17:34
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Jenkins
Jenkins readyapi Functional Testing |
|
| References | () https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3556 - Vendor Advisory | |
| CPE | cpe:2.3:a:jenkins:readyapi_functional_testing:*:*:*:*:*:jenkins:*:* |
09 Jul 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-09 16:15
Updated : 2025-07-18 17:34
NVD link : CVE-2025-53657
Mitre link : CVE-2025-53657
JSON object : View
Products Affected
jenkins
- readyapi_functional_testing
CWE
No CWE.