CVE-2025-31727

5.5MEDIUM

Jenkins AsakusaSatellite Plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Re

发布于: 4/2/2025更新于: 4/17/2025
在NVD查看在MITRE查看

描述

Jenkins AsakusaSatellite Plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

AI分析AI驱动

受影响产品

jenkinsasakusasatellite

参考资料