CVE-2025-31727

5.5MEDIUM

Jenkins AsakusaSatellite Plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Re

Published: 4/2/2025Updated: 4/17/2025
View on NVDView on MITRE

Description

Jenkins AsakusaSatellite Plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

AI AnalysisPowered by AI

Affected Products

jenkinsasakusasatellite

References