VULNERABILITY INTELLIGENCE
CVE-2025-53671
CVSS score6.5 MEDIUM
EPSS probability0.21%
CISA KEVNot currently listed
Published2025-07-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
Jenkins Nouvola DiveCloud Plugin 1.08 and earlier does not mask DiveCloud API Keys and Credentials Encryption Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-256
Primary references
- jenkinsci-cert@googlegroups.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108