PT-2025-28925

CVE-2025-53673

Published

2025-07-09

Updated

2025-10-01

Description by

CVSS 2.0

6.8

Medium

MetricsAV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Jenkins Sensedia Api Platform Tools Plugin version 1.0

Description: The Jenkins Sensedia Api Platform Tools Plugin stores the Sensedia API Manager integration token unencrypted in its global configuration file on the Jenkins controller. This allows users with access to the Jenkins controller file system to view the token.

Recommendations: Ensure the Jenkins controller file system is adequately secured to prevent unauthorized access.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-311: Missing Encryption of Sensitive Data

Related identifiers

CVE-2025-53673

BDU:2025-08554