← CVE Intelligence

CVE-2025-53670

Jenkins Project / Jenkins Nouvola DiveCloud Plugin PUBLISHED

Description (CNA)

Jenkins Nouvola DiveCloud Plugin 1.08 and earlier stores DiveCloud API Keys and Credentials Encryption Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

Affected (CNA)

Vendor / productVersions
Jenkins Project / Jenkins Nouvola DiveCloud Pluginaffected 0 through 1.08

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.