CVE-2025-53659 - Jenkins QMetry Test Management Plugin API Key Exposure

CVE ID : CVE-2025-53659
Published : July 9, 2025, 4:15 p.m. | 2 hours, 9 minutes ago
Description : Jenkins QMetry Test Management Plugin 1.13 and earlier stores Qmetry Automation API Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...

from Latest Vulnerabilities https://ift.tt/6FtlsCM
via IFTTT

Post a Comment

Please Select Embedded Mode To Show The Comment System.*

Previous Post Next Post