Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier does not mask SLM License Access Keys, client secrets, and passwords displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
References
| Link | Resource |
|---|---|
| https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3556 | Vendor Advisory |
Configurations
History
18 Jul 2025, 17:34
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Jenkins
Jenkins readyapi Functional Testing |
|
| CPE | cpe:2.3:a:jenkins:readyapi_functional_testing:*:*:*:*:*:jenkins:*:* | |
| References | () https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3556 - Vendor Advisory |
10 Jul 2025, 13:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-09 16:15
Updated : 2025-07-18 17:34
NVD link : CVE-2025-53657
Mitre link : CVE-2025-53657
CVE.ORG link : CVE-2025-53657
JSON object : View
Products Affected
jenkins
- readyapi_functional_testing
CWE
CWE-522
Insufficiently Protected Credentials