Moderate severityNVD Advisory· Published Apr 2, 2025· Updated Apr 3, 2025
CVE-2025-31725
CVE-2025-31725
Description
Jenkins monitor-remote-job Plugin 1.0 stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.
Affected products
1- Range: 1.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- github.com/advisories/GHSA-g65g-fmcp-4w68ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2025-31725ghsaADVISORY
- www.jenkins.io/security/advisory/2025-04-02/ghsavendor-advisoryWEB
News mentions
0No linked articles in our index yet.