Jenkins Apica Loadtest Plugin 1.10 and earlier does not mask Apica Loadtest LTP authentication tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3540 | Vendor Advisory |
Configurations
History
18 Jul 2025, 18:42
Type | Values Removed | Values Added |
---|---|---|
First Time |
Jenkins
Jenkins apica Loadtest |
|
CPE | cpe:2.3:a:jenkins:apica_loadtest:*:*:*:*:*:jenkins:*:* | |
References | () https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3540 - Vendor Advisory |
09 Jul 2025, 16:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-07-09 16:15
Updated : 2025-07-18 18:42
NVD link : CVE-2025-53665
Mitre link : CVE-2025-53665
JSON object : View
Products Affected
jenkins
- apica_loadtest
CWE
No CWE.