CVE-2025-31721

🗓️ 02 Apr 2025 14:59:50Reported by jenkinsType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 144 Views

Missing permission in Jenkins allows unauthorized access to encrypted secrets in configuration.

Reporter	Title	Published	Views	Family All 359
FreeBSD	jenkins -- multiple vulnerabilities	2 Apr 202500:00	–	freebsd
AlpineLinux	CVE-2025-31721	2 Apr 202515:15	–	alpinelinux
BDU FSTEC	Jenkins Automation Server Privilege Escalation	7 Apr 202500:00	–	bdu_fstec
Chainguard	CVE-2025-31721 vulnerabilities	11 Sep 202514:22	–	cgr
Circl	CVE-2025-31721	2 Apr 202517:33	–	circl
CNNVD	Jenkins 安全漏洞	2 Apr 202500:00	–	cnnvd
Cvelist	CVE-2025-31721	2 Apr 202514:59	–	cvelist
EUVD	EUVD-2025-9526	3 Oct 202520:07	–	euvd
Tenable Nessus	FreeBSD : jenkins -- multiple vulnerabilities (45276ea6-1653-4240-9986-ccfc6fec7ece)	11 Apr 202500:00	–	nessus
Tenable Nessus	Jenkins LTS < 2.492.3 / Jenkins weekly < 2.504 Multiple Vulnerabilities	2 Apr 202500:00	–	nessus

NVD

Vulners

Node

jenkins jenkinsRange<2.492.3lts

Node

jenkins jenkinsRange<2.504-

[
  {
    "vendor": "Jenkins Project",
    "product": "Jenkins",
    "versions": [
      {
        "version": "2.492.3",
        "versionType": "maven",
        "lessThan": "2.492.*",
        "status": "unaffected"
      },
      {
        "version": "2.504",
        "versionType": "maven",
        "lessThan": "*",
        "status": "unaffected"
      }
    ],
    "defaultStatus": "affected"
  }
]