Jenkins Credentials Binding Plugin 687.v619cb_15e923f and earlier does not properly mask (i.e., replace with asterisks) credentials present in exception error messages that are written to the build log.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00087.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Jenkins
  • Credentials Binding

Configuration 1 [-]

cpe:2.3:a:jenkins:credentials_binding:*:*:*:*:*:jenkins:*:*

No data.

No data.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-20864 Jenkins Credentials Binding Plugin vulnerability can expose sensitive information in logger messages
Github GHSA Github GHSA GHSA-9768-hprv-crj5 Jenkins Credentials Binding Plugin vulnerability can expose sensitive information in logger messages
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
http://www.openwall.com/lists/oss-security/2025/07/09/4 cve-icon
https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3499 cve-icon cve-icon
History

Tue, 04 Nov 2025 22:30:00 +0000

Type Values Removed Values Added
References

Fri, 18 Jul 2025 18:15:00 +0000

Type Values Removed Values Added
First Time appeared Jenkins
Jenkins credentials Binding
Weaknesses CWE-522
CPEs cpe:2.3:a:jenkins:credentials_binding:*:*:*:*:*:jenkins:*:*
Vendors & Products Jenkins
Jenkins credentials Binding

Tue, 15 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00037}

 epss

{'score': 0.00049}

Wed, 09 Jul 2025 21:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 09 Jul 2025 15:45:00 +0000

Type Values Removed Values Added
Description Jenkins Credentials Binding Plugin 687.v619cb_15e923f and earlier does not properly mask (i.e., replace with asterisks) credentials present in exception error messages that are written to the build log.
References
cve-icon MITRE

Status: PUBLISHED

Assigner: jenkins

Published:

Updated: 2025-11-04T21:11:52.810Z

Reserved: 2025-07-08T07:51:59.761Z

Link: CVE-2025-53650

cve-icon Vulnrichment

Updated: 2025-11-04T21:11:52.810Z

cve-icon NVD

Status : Modified

Published: 2025-07-09T16:15:24.397

Modified: 2025-11-04T22:16:22.147

Link: CVE-2025-53650

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.