What is CVE-2025-53656?

CVE-2025-53656 is a medium-severity vulnerability in Jenkins Readyapi_functional_testing, classified under Plaintext Storage of a Password. CVSS score: 6.5/10. Published 2025-07-09.

How severe is CVE-2025-53656?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Jenkins Readyapi_functional_testing

CVE-2025-53656

Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier stores SLM License Access Keys, client secrets, and passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended R…

EPSS: 0.003 (26.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Jenkins Readyapi_functional_testing
Jenkins Project Readyapi Functional Testing Plugin — versions 0

Weakness classification (CWE)

CWE-256 — Plaintext Storage of a Password

References

jenkinsci-cert@googlegroups.com (vendor-advisory, Vendor Advisory)
af854a3a-2127-422b-91ae-364da2661108

Frequently asked questions

What is CVE-2025-53656?: CVE-2025-53656 is a medium-severity vulnerability in Jenkins Readyapi_functional_testing, classified under Plaintext Storage of a Password. CVSS score: 6.5/10. Published 2025-07-09.
How severe is CVE-2025-53656?: Medium severity. CVSS v3 base score is 6.5 out of 10.