Skip to content
Sign in
6.5 Medium

CVE-2025-53656 Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier stores SLM License Access Keys, client secrets, and…

Description

Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier stores SLM License Access Keys, client secrets, and passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

Affected products and versions

Product Affected versions Fixed in
Jenkins ReadyAPI Functional Testing Plugin 1.11 earliest → 1.11 No fix stated

Other CVEs of Jenkins ReadyAPI Functional Testing Plugin

The 2 CVEs of Jenkins ReadyAPI Functional Testing Plugin →
CVE-2025-53657 Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier does not mask SLM License Access Keys, client secrets, and… 4.3 Medium
Track this CVE