Product · Jenkins Project

Jenkins IBM Cloud DevOps Plugin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.5

CVE-2025-53663

Jenkins IBM Cloud DevOps Plugin vulnerability exposes SonarQube authentication tokens

Jenkins IBM Cloud DevOps Plugin 2.0.16 and earlier stores SonarQube authentication tokens unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller f…

Jenkins Project Jenkins IBM Cloud DevOps Plugin com.ibm.devops:ibm-cloud-devops Web / CMS Maven

Jul 9, 2025