Vulnerabilities

TI-2025-33579 CVE-2025-53655 · GHSA-26x3-7jw5-7mg4

Jenkins Statistics Gatherer Plugin 2.0.3 and earlier does not mask the AWS Secret Key on…

LOW 30

Jenkins Statistics Gatherer Plugin 2.0.3 and earlier does not mask the AWS Secret Key on the global configuration form, increasing the potential for attackers to observe and capture it.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00357 Published 2025-07-09 No fix listed CWE-256

TI-2025-33578 CVE-2025-53654 · GHSA-3c9f-c64m-h4wc

Insufficiently protected credentials in Jenkins Statistics Gatherer Plugin

LOW 29

Jenkins Statistics Gatherer Plugin 2.0.3 and earlier stores the AWS Secret Key unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00413 Published 2025-07-09 No fix listed CWE-522

Vulnerabilities

Filters

Jenkins Statistics Gatherer Plugin 2.0.3 and earlier does not mask the AWS Secret Key on…

Insufficiently protected credentials in Jenkins Statistics Gatherer Plugin