Jenkins AsakusaSatellite Plugin 0.1.1 and earlier does not mask AsakusaSatellite API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3523 | Vendor Advisory |
Configurations
History
17 Apr 2025, 14:35
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Jenkins
Jenkins asakusasatellite |
|
| References | () https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3523 - Vendor Advisory | |
| CPE | cpe:2.3:a:jenkins:asakusasatellite:*:*:*:*:*:jenkins:*:* |
02 Apr 2025, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-02 15:16
Updated : 2025-04-17 14:35
NVD link : CVE-2025-31728
Mitre link : CVE-2025-31728
JSON object : View
Products Affected
jenkins
- asakusasatellite
CWE
No CWE.