Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Jenkins Project | Jenkins AsakusaSatellite Plugin | unknown |
|
No data.
No data available yet.
No remediation available yet.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2025-9530 | Jenkins AsakusaSatellite Plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system. |
 Github GHSA |
GHSA-fv9q-fq62-c6qg | Jenkins AsakusaSatellite Plugin Stores API Keys Unencrypted in Job `config.xml` Files |
Thu, 17 Apr 2025 15:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Jenkins
Jenkins asakusasatellite |
|
| CPEs | cpe:2.3:a:jenkins:asakusasatellite:*:*:*:*:*:jenkins:*:* | |
| Vendors & Products |
Jenkins
Jenkins asakusasatellite |
Thu, 03 Apr 2025 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-549 | |
| Metrics |
cvssV3_1
|
Wed, 02 Apr 2025 15:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Jenkins AsakusaSatellite Plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: jenkins
Published:
Updated: 2025-04-03T20:19:52.127Z
Reserved: 2025-04-01T12:50:10.766Z
Link: CVE-2025-31727
Vulnrichment
Updated: 2025-04-02T17:42:19.311Z
NVD
Status : Analyzed
Published: 2025-04-02T15:16:00.270
Modified: 2025-04-17T14:38:18.480
Link: CVE-2025-31727
Redhat
No data.
OpenCVE Enrichment
No data.