Threats tagged 'ghsa-26x3-7jw5-7mg4'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.4%	CVE-2025-53655Org.jenkins.plugins.statistics.gatherer:statistics gatherer: Jenkins Statistics Gatherer Plugin does not mask AWS Medium5.3EPSS 0.4%2025-07-09GCVE DatabaseCVE-2025-53655 The Jenkins Statistics Gatherer Plugin versions 2.0.3 and earlier store the AWS Secret Key unencrypted in the global configuration file on the Jenkins controller. This key is accessible to any user with file system access to the Jenkins controller. Additionally, the plugin's configuration form does not mask the AWS Secret Key, increasing the risk of exposure. No fix is currently available for this vulnerability. EPSS 0.4%Report on CVE-2025-53655 Vulnerability CWE-256 #ghsa-26x3-7jw5-7mg4 #maven	GCVE Database	2025-07-09

Page 1 of 1