CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2025-53656
Medium (6.5) in jenkins readyapi functional testing. EPSS 0.4% chance of exploitation in the next 30 days.
Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier stores SLM License Access Keys, client secrets, and passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
- CWE
- CWE-256
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jenkins:readyapi_functional_testing
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-884f-p57j-f258 | Maven | org.jenkins-ci.plugins:soapui-pro-functional-testing | <=1.11 | no fix published |