Skip to content
Sign in
5.3 Medium

CVE-2025-53655 Jenkins Statistics Gatherer Plugin 2.0.3 and earlier does not mask the AWS Secret Key on the global configuration…

Description

Jenkins Statistics Gatherer Plugin 2.0.3 and earlier does not mask the AWS Secret Key on the global configuration form, increasing the potential for attackers to observe and capture it.

Affected products and versions

Product Affected versions Fixed in
Jenkins Statistics Gatherer Plugin 2.0 earliest → 2.0.3 No fix stated

Other CVEs of Jenkins Statistics Gatherer Plugin

The 2 CVEs of Jenkins Statistics Gatherer Plugin →
CVE-2025-53654 Jenkins Statistics Gatherer Plugin 2.0.3 and earlier stores the AWS Secret Key unencrypted in its global configuration… 6.5 Medium
Track this CVE