CVE-2025-31727

5.5MEDIUM

Jenkins AsakusaSatellite Plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Re

게시됨: 4/2/2025업데이트됨: 4/17/2025
NVD에서 보기MITRE에서 보기

설명

Jenkins AsakusaSatellite Plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

AI 분석AI 기반

영향받는 제품

jenkinsasakusasatellite

참조