BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Jenkins

Jenkins Security Advisory 2025-04-02

2025-04-02 Apr 2, 2025 Source: Vendor

Imported by the Jenkins advisory catcher from https://www.jenkins.io/security/advisory/2025-04-02/. 8 SECURITY issues listed. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.jenkins.io/security/advisory/2025-04-02/
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

10 lines
All 10 CVEs 10 Additional recognition 0 Unclaimed only
Showing 1–10 of 10
CVE-2025-31720 BR2025-0000-009227 SECURITY-3512 unclaimed
Missing permission check allows retrieving agent configurations
Credited as Daniel Beck, CloudBees, Inc.
CVE-2025-31721 BR2025-0000-009228 SECURITY-3513 unclaimed
Missing permission check allows retrieving secrets from agent configurations
Credited as Daniel Beck, CloudBees, Inc.
CVE-2025-31727 BR2025-0000-009229 SECURITY-3523 unclaimed
API keys stored and displayed in plain text by AsakusaSatellite Plugin
Credited as Romuald Moisan, Aix Marseille University
CVE-2025-31727 BR2025-0000-009230 SECURITY-3523 unclaimed
API keys stored and displayed in plain text by AsakusaSatellite Plugin
Credited as Vincent Lardet, Aix Marseille University
CVE-2025-31724 BR2025-0000-009231 SECURITY-3537 unclaimed
API keys stored in plain text by Cadence vManager Plugin
Credited as Romuald Moisan, Aix Marseille University
CVE-2025-31724 BR2025-0000-009232 SECURITY-3537 unclaimed
API keys stored in plain text by Cadence vManager Plugin
Credited as Vincent Lardet, Aix Marseille University
CVE-2025-31723 BR2025-0000-009233 SECURITY-3469 unclaimed
CSRF vulnerability in Simple Queue Plugin
Credited as Swapna Nanda, CloudBees, Inc.
CVE-2025-31725 BR2025-0000-009234 SECURITY-3539 unclaimed
Passwords stored in plain text by monitor-remote-job Plugin
Credited as Zaoui Zakariae, Aix Marseille University
CVE-2025-31726 BR2025-0000-009235 SECURITY-3520 unclaimed
API keys stored in plain text by Stack Hammer Plugin
Credited as Zaoui Zakariae, Aix Marseille University
CVE-2025-31726 BR2025-0000-009236 SECURITY-3520 unclaimed
API keys stored in plain text by Stack Hammer Plugin
Credited as Romuald Moisan, Aix Marseille University