Skip to content
Sign in
6.5 Medium

CVE-2025-53664 Jenkins Apica Loadtest Plugin 1.10 and earlier stores Apica Loadtest LTP authentication tokens unencrypted in job…

Description

Jenkins Apica Loadtest Plugin 1.10 and earlier stores Apica Loadtest LTP authentication tokens unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

Affected products and versions

Product Affected versions Fixed in
Jenkins Apica Loadtest Plugin 1.10 earliest → 1.10 No fix stated

Other CVEs of Jenkins Apica Loadtest Plugin

The 2 CVEs of Jenkins Apica Loadtest Plugin →
CVE-2025-53665 Jenkins Apica Loadtest Plugin 1.10 and earlier does not mask Apica Loadtest LTP authentication tokens displayed on the… 4.3 Medium
Track this CVE