Jenkins Dead Man's Snitch Plugin 0.1 does not mask Dead Man's Snitch tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Jenkins
  • Dead Man\'s Snitch

Configuration 1 [-]

cpe:2.3:a:jenkins:dead_man\'s_snitch:0.1:*:*:*:*:jenkins:*:*

No data.

References
Link Providers
https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3524 cve-icon cve-icon
History

Fri, 18 Jul 2025 18:45:00 +0000

Type Values Removed Values Added
First Time appeared Jenkins
Jenkins dead Man\'s Snitch
CPEs cpe:2.3:a:jenkins:dead_man\'s_snitch:0.1:*:*:*:*:jenkins:*:*
Vendors & Products Jenkins
Jenkins dead Man\'s Snitch

Tue, 15 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00028}

 epss

{'score': 0.00037}

Wed, 09 Jul 2025 20:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-522
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}

Wed, 09 Jul 2025 15:45:00 +0000

Type Values Removed Values Added
Description Jenkins Dead Man's Snitch Plugin 0.1 does not mask Dead Man's Snitch tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
References
cve-icon MITRE

Status: PUBLISHED

Assigner: jenkins

Published: 2025-07-09T15:39:36.655Z

Updated: 2025-07-09T19:14:02.674Z

Reserved: 2025-07-08T07:51:59.763Z

Link: CVE-2025-53667

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2025-07-09T16:15:26.143

Modified: 2025-07-18T18:43:53.230

Link: CVE-2025-53667

cve-icon Redhat

No data.