SB2025072944 - Insufficiently protected credentials in Jenkins Credentials Binding plugin
Published: July 29, 2025
Security Bulletin ID
SB2025072944
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Insufficiently protected credentials (CVE-ID: CVE-2025-53650)
CWE-ID: CWE-522 - Insufficiently Protected Credentials
CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green
The vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to the affected aplpication does not properly mask credentials present in exception error messages that are written to the build log. A remote user can gain access to sensitive information on the system.
Remediation
Install update from vendor's website.