CVE-2025-31728
- State
- Published
- Severity
- 5.5 Medium
- Published
- Apr 2, 2025
- Updated
- Apr 3, 2025
- Reserved
- Apr 1, 2025
Description
Jenkins AsakusaSatellite Plugin 0.1.1 and earlier does not mask AsakusaSatellite API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.5 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L | CISA-ADP |
Weaknesses
- CWE-549 Missing Password Field Masking
Affected Products
| Product | Versions |
|---|---|
Jenkins AsakusaSatellite PluginJenkins Project |
|
References
- Jenkins Security Advisory 2025-04-02vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.