CVE-2025-31721 - Vulnerability Details

Link	Providers
https://nvd.nist.gov/vuln/detail/CVE-2025-31721
https://www.cve.org/CVERecord?id=CVE-2025-31721
https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3513

Type	Values Removed	Values Added
Title		jenkins: Missing permission check allows retrieving secrets from agent configurations
References		https://nvd.nist.gov/vuln/detail/CVE-2025-31721 https://www.cve.org/CVERecord?id=CVE-2025-31721
Metrics	threat_severity `None`	threat_severity `Moderate`

Type	Values Removed	Values Added
Weaknesses		CWE-862
Metrics		cvssV3_1 `{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Computer/Create permission but without Computer/Configure permission to copy an agent, gaining access to encrypted secrets in its configuration.
References		https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3513

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-31721", "assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b", "state": "PUBLISHED", "assignerShortName": "jenkins", "dateReserved": "2025-04-01T12:50:10.765Z", "datePublished": "2025-04-02T14:59:50.144Z", "dateUpdated": "2025-04-02T16:51:08.706Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b", "shortName": "jenkins", "dateUpdated": "2025-04-02T14:59:50.144Z"}, "affected": [{"vendor": "Jenkins Project", "product": "Jenkins", "versions": [{"version": "2.492.3", "versionType": "maven", "lessThan": "2.492.*", "status": "unaffected"}, {"version": "2.504", "versionType": "maven", "lessThan": "*", "status": "unaffected"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Computer/Create permission but without Computer/Configure permission to copy an agent, gaining access to encrypted secrets in its configuration."}], "references": [{"name": "Jenkins Security Advisory 2025-04-02", "url": "https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3513", "tags": ["vendor-advisory"]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-862", "lang": "en", "description": "CWE-862 Missing Authorization"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-04-02T16:49:39.367838Z", "id": "CVE-2025-31721", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-02T16:51:08.706Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2025-31721 (string)

assignerOrgId : 39769cd5-e6e2-4dc8-927e-97b3aa056f5b (string)

state : PUBLISHED (string)

assignerShortName : jenkins (string)

dateReserved : 2025-04-01T12:50:10.765Z (string)

datePublished : 2025-04-02T14:59:50.144Z (string)

dateUpdated : 2025-04-02T16:51:08.706Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 39769cd5-e6e2-4dc8-927e-97b3aa056f5b (string)

shortName : jenkins (string)

dateUpdated : 2025-04-02T14:59:50.144Z (string)

}

affected : [ »

0 : { »

vendor : Jenkins Project (string)

product : Jenkins (string)

versions : [ »

0 : { »

version : 2.492.3 (string)

versionType : maven (string)

lessThan : 2.492.* (string)

status : unaffected (string)

}

1 : { »

version : 2.504 (string)

versionType : maven (string)

lessThan : * (string)

status : unaffected (string)

}

]

defaultStatus : affected (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Computer/Create permission but without Computer/Configure permission to copy an agent, gaining access to encrypted secrets in its configuration. (string)

}

]

references : [ »

0 : { »

name : Jenkins Security Advisory 2025-04-02 (string)

url : https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3513 (string)

tags : [ »

0 : vendor-advisory (string)

]

}

]

}

adp : [ »

0 : { »

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

cweId : CWE-862 (string)

lang : en (string)

description : CWE-862 Missing Authorization (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 4.3 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : LOW (string)

confidentialityImpact : LOW (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-04-02T16:49:39.367838Z (string)

id : CVE-2025-31721 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-04-02T16:51:08.706Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-31721", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-04-02T16:49:39.367838Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-862", "description": "CWE-862 Missing Authorization"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-02T16:51:03.293Z"}}], "cna": {"affected": [{"vendor": "Jenkins Project", "product": "Jenkins", "versions": [{"status": "unaffected", "version": "2.492.3", "lessThan": "2.492.*", "versionType": "maven"}, {"status": "unaffected", "version": "2.504", "lessThan": "*", "versionType": "maven"}], "defaultStatus": "affected"}], "references": [{"url": "https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3513", "name": "Jenkins Security Advisory 2025-04-02", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en", "value": "A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Computer/Create permission but without Computer/Configure permission to copy an agent, gaining access to encrypted secrets in its configuration."}], "providerMetadata": {"orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b", "shortName": "jenkins", "dateUpdated": "2025-04-02T14:59:50.144Z"}}}, "cveMetadata": {"cveId": "CVE-2025-31721", "state": "PUBLISHED", "dateUpdated": "2025-04-02T16:51:08.706Z", "dateReserved": "2025-04-01T12:50:10.765Z", "assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b", "datePublished": "2025-04-02T14:59:50.144Z", "assignerShortName": "jenkins"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 4.3 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : LOW (string)

confidentialityImpact : LOW (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2025-31721 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-04-02T16:49:39.367838Z (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-862 (string)

description : CWE-862 Missing Authorization (string)

}

]

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-04-02T16:51:03.293Z (string)

}

]

cna : { »

affected : [ »

0 : { »

vendor : Jenkins Project (string)

product : Jenkins (string)

versions : [ »

0 : { »

status : unaffected (string)

version : 2.492.3 (string)

lessThan : 2.492.* (string)

versionType : maven (string)

}

1 : { »

status : unaffected (string)

version : 2.504 (string)

lessThan : * (string)

versionType : maven (string)

}

]

defaultStatus : affected (string)

}

]

references : [ »

0 : { »

url : https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3513 (string)

name : Jenkins Security Advisory 2025-04-02 (string)

tags : [ »

0 : vendor-advisory (string)

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Computer/Create permission but without Computer/Configure permission to copy an agent, gaining access to encrypted secrets in its configuration. (string)

}

]

providerMetadata : { »

orgId : 39769cd5-e6e2-4dc8-927e-97b3aa056f5b (string)

shortName : jenkins (string)

dateUpdated : 2025-04-02T14:59:50.144Z (string)

}

cveMetadata : { »

cveId : CVE-2025-31721 (string)

state : PUBLISHED (string)

dateUpdated : 2025-04-02T16:51:08.706Z (string)

dateReserved : 2025-04-01T12:50:10.765Z (string)

assignerOrgId : 39769cd5-e6e2-4dc8-927e-97b3aa056f5b (string)

datePublished : 2025-04-02T14:59:50.144Z (string)

assignerShortName : jenkins (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"cveTags": [], "descriptions": [{"lang": "en", "value": "A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Computer/Create permission but without Computer/Configure permission to copy an agent, gaining access to encrypted secrets in its configuration."}, {"lang": "es", "value": "Una verificaci\u00f3n de permiso que falta en Jenkins 2.503 y anteriormente, LTS 2.492.2 y antes permite a los atacantes con ordenador/Cree permiso pero wi ordenador MUTER/CONFIGURAR Permiso para copiar un agente, obtener acceso a los secretes cifrados en su configuraci\u00f3n."}], "id": "CVE-2025-31721", "lastModified": "2025-04-07T14:18:49.830", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2025-04-02T15:15:59.547", "references": [{"source": "jenkinsci-cert@googlegroups.com", "url": "https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3513"}], "sourceIdentifier": "jenkinsci-cert@googlegroups.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Computer/Create permission but without Computer/Configure permission to copy an agent, gaining access to encrypted secrets in its configuration. (string)

}

1 : { »

lang : es (string)

value : Una verificación de permiso que falta en Jenkins 2.503 y anteriormente, LTS 2.492.2 y antes permite a los atacantes con ordenador/Cree permiso pero wi ordenador MUTER/CONFIGURAR Permiso para copiar un agente, obtener acceso a los secretes cifrados en su configuración. (string)

}

]

id : CVE-2025-31721 (string)

lastModified : 2025-04-07T14:18:49.830 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 4.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 1.4 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2025-04-02T15:15:59.547 (string)

references : [ »

0 : { »

source : jenkinsci-cert@googlegroups.com (string)

url : https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3513 (string)

}

]

sourceIdentifier : jenkinsci-cert@googlegroups.com (string)

vulnStatus : Awaiting Analysis (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-862 (string)

}

]

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

Show plain JSON

{"bugzilla": {"description": "jenkins: Missing permission check allows retrieving secrets from agent configurations", "id": "2356948", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2356948"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.9", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "status": "draft"}, "cwe": "CWE-862", "details": ["A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Computer/Create permission but without Computer/Configure permission to copy an agent, gaining access to encrypted secrets in its configuration."], "name": "CVE-2025-31721", "package_state": [{"cpe": "cpe:/a:redhat:ocp_tools", "fix_state": "Fix deferred", "package_name": "jenkins", "product_name": "OpenShift Developer Tools and Services"}, {"cpe": "cpe:/a:redhat:rhdh:1", "fix_state": "Fix deferred", "package_name": "rhdh/rhdh-hub-rhel9", "product_name": "Red Hat Developer Hub"}], "public_date": "2025-04-02T14:59:50Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2025-31721\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-31721\nhttps://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3513"], "threat_severity": "Moderate"}

{

bugzilla : { »

description : jenkins: Missing permission check allows retrieving secrets from agent configurations (string)

id : 2356948 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2356948 (string)

}

csaw : false (boolean)

cvss3 : { »

cvss3_base_score : 4.9 (string)

cvss3_scoring_vector : CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N (string)

status : draft (string)

}

cwe : CWE-862 (string)

details : [ »

0 : A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Computer/Create permission but without Computer/Configure permission to copy an agent, gaining access to encrypted secrets in its configuration. (string)

]

name : CVE-2025-31721 (string)

package_state : [ »

0 : { »

cpe : cpe:/a:redhat:ocp_tools (string)

fix_state : Fix deferred (string)

package_name : jenkins (string)

product_name : OpenShift Developer Tools and Services (string)

}

1 : { »

cpe : cpe:/a:redhat:rhdh:1 (string)

fix_state : Fix deferred (string)

package_name : rhdh/rhdh-hub-rhel9 (string)

product_name : Red Hat Developer Hub (string)

}

]

public_date : 2025-04-02T14:59:50Z (string)

references : [ »

0 : https://www.cve.org/CVERecord?id=CVE-2025-31721 https://nvd.nist.gov/vuln/detail/CVE-2025-31721 https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3513 (string)

]

threat_severity : Moderate (string)

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object