Skip to content
Sign in
6.5 Medium

CVE-2025-53654 Jenkins Statistics Gatherer Plugin 2.0.3 and earlier stores the AWS Secret Key unencrypted in its global configuration…

Description

Jenkins Statistics Gatherer Plugin 2.0.3 and earlier stores the AWS Secret Key unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system.

Affected products and versions

Product Affected versions Fixed in
Jenkins Statistics Gatherer Plugin 2.0 earliest → 2.0.3 No fix stated

Other CVEs of Jenkins Statistics Gatherer Plugin

The 2 CVEs of Jenkins Statistics Gatherer Plugin →
CVE-2025-53655 Jenkins Statistics Gatherer Plugin 2.0.3 and earlier does not mask the AWS Secret Key on the global configuration… 5.3 Medium
Track this CVE