Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins VAddy Plugin — Jenkins Security Advisory 2025-07-09 Clear all filters
TI-2025-33593 CVE-2025-53669 · GHSA-8gp3-m447-gw2v

Insufficiently protected credentials in Jenkins VAddy Plugin

Priority LOW 20

Jenkins VAddy Plugin 1.2.8 and earlier does not mask Vaddy API Auth Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00267 Published 2025-07-09 No fix listed CWE-256
TI-2025-33592 CVE-2025-53668 · GHSA-mr49-vmp6-2pwq

Jenkins VAddy Plugin 1.2.8 and earlier stores Vaddy API Auth Keys unencrypted in job…

Priority LOW 28

Jenkins VAddy Plugin 1.2.8 and earlier stores Vaddy API Auth Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenki…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00245 Published 2025-07-09 No fix listed CWE-311