← Database

CVE-2025-31727

MEDIUM CVSS: 5.5 Published: 2025-04-02 Modified: 2026-06-17

Description

Jenkins AsakusaSatellite Plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.

Affected Platforms

Jenkins Asakusasatellite

Weakness Type

CWE-549

References