Threats tagged 'ghsa-pgrx-5f8q-r5mq'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.2%	CVE-2025-53663Com.ibm.devops:ibm cloud devops: Jenkins IBM Cloud DevOps Plugin vulnerability exposes SonarQube authentication tokens Medium6.5EPSS 0.2%2025-07-09GCVE DatabaseCVE-2025-53663 Jenkins IBM Cloud DevOps Plugin versions 2.0.16 and earlier store SonarQube authentication tokens unencrypted in job config.xml files on the Jenkins controller. Users with Item/Extended Read permission or access to the Jenkins controller file system can view these tokens. No fix is currently available for this vulnerability. EPSS 0.2%Report on CVE-2025-53663 Vulnerability CWE-311 #ghsa-pgrx-5f8q-r5mq #maven	GCVE Database	2025-07-09

Page 1 of 1