Skip to content
Sign in
6.5 Medium

CVE-2025-53670 Jenkins Nouvola DiveCloud Plugin 1.08 and earlier stores DiveCloud API Keys and Credentials Encryption Keys…

Description

Jenkins Nouvola DiveCloud Plugin 1.08 and earlier stores DiveCloud API Keys and Credentials Encryption Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

Affected products and versions

Product Affected versions Fixed in
Jenkins Nouvola DiveCloud Plugin 1.08 earliest → 1.08 No fix stated

Other CVEs of Jenkins Nouvola DiveCloud Plugin

The 2 CVEs of Jenkins Nouvola DiveCloud Plugin →
CVE-2025-53671 Jenkins Nouvola DiveCloud Plugin 1.08 and earlier does not mask DiveCloud API Keys and Credentials Encryption Keys… 6.5 Medium
Track this CVE