Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins ReadyAPI Functional Testing Plugin — Jenkins Security Advisory 2025-07-09 Clear all filters
TI-2025-33581 CVE-2025-53657 · GHSA-r496-x769-f8j4

Insufficiently protected credentials in Jenkins ReadyAPI Functional Testing Plugin

Priority LOW 20

Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier does not mask SLM License Access Keys, client secrets, and passwords displayed on the job configuration form, increasing the potential for attackers to observe…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00277 Published 2025-07-09 No fix listed CWE-522
TI-2025-33580 CVE-2025-53656 · GHSA-884f-p57j-f258

Insufficiently protected credentials in Jenkins ReadyAPI Functional Testing Plugin

Priority LOW 29

Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier stores SLM License Access Keys, client secrets, and passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users w…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00419 Published 2025-07-09 No fix listed CWE-256