Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins Dead Man's Snitch Plugin — Jenkins Security Advisory 2025-07-09 Clear all filters
TI-2025-33591 CVE-2025-53667 · GHSA-m248-72rh-cpx4

Insufficiently protected credentials in Jenkins Dead Man's Snitch Plugin

Priority LOW 30

Jenkins Dead Man's Snitch Plugin 0.1 does not mask Dead Man's Snitch tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00313 Published 2025-07-09 No fix listed CWE-522
TI-2025-33590 CVE-2025-53666 · GHSA-5pcv-7v3q-hw8j

Insufficiently protected credentials in Jenkins Dead Man's Snitch Plugin

Priority LOW 28

Jenkins Dead Man's Snitch Plugin 0.1 stores Dead Man's Snitch tokens unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Je…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00245 Published 2025-07-09 No fix listed CWE-311