CVE-2025-53650 — Jenkins Project / Jenkins Credentials Binding Plugin

CVE-2025-53650

Jenkins Project / Jenkins Credentials Binding Plugin PUBLISHED

Description (CNA)

Jenkins Credentials Binding Plugin 687.v619cb_15e923f and earlier does not properly mask (i.e., replace with asterisks) credentials present in exception error messages that are written to the build log.

Affected (CNA)

Vendor / product	Versions
Jenkins Project / Jenkins Credentials Binding Plugin	affected 0 through 687.v619cb_15e923f

CWE

No CWE identifiers supplied.

References

https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3499

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2025/07/09/4