Vulnerability Details CVE-2025-31727
Jenkins AsakusaSatellite Plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 11.8%
CVSS Severity
CVSS v3 Score 5.5
Products affected by CVE-2025-31727
-
cpe:2.3:a:jenkins:asakusasatellite:-
-
cpe:2.3:a:jenkins:asakusasatellite:0.1
-
cpe:2.3:a:jenkins:asakusasatellite:0.1.1