Aller au contenu
Se connecter
4.3 Moyenne

CVE-2025-53653 Jenkins Aqua Security Scanner Plugin 3.2.8 and earlier stores Scanner Tokens for Aqua API unencrypted in job…

Description

Jenkins Aqua Security Scanner Plugin 3.2.8 and earlier stores Scanner Tokens for Aqua API unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins Aqua Security Scanner Plugin 3.2 premières → 3.2.8 Pas de correctif indiqué

Autres CVE de Jenkins Aqua Security Scanner Plugin

Les 3 CVE de Jenkins Aqua Security Scanner Plugin →
CVE-2019-10428 Jenkins Aqua Security Scanner Plugin 3.0.17 and earlier transmitted configured credentials in plain text as part of… Non notée CVE-2019-1003069 Jenkins Aqua Security Scanner Plugin stores credentials unencrypted in its global configuration file on the Jenkins… Non notée
Suivre cette CVE