VULNERABILITY INTELLIGENCE
CVE-2025-53667
CVSS score5.3 MEDIUM
EPSS probability0.31%
CISA KEVNot currently listed
Published2025-07-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
Jenkins Dead Man's Snitch Plugin 0.1 does not mask Dead Man's Snitch tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
Weakness classification
- CWE-522: Insufficiently Protected Credentials
Primary references
- jenkinsci-cert@googlegroups.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108