CVE-2025-31728

The Jenkins AsakusaSatellite Plugin (version 0.1.1 and earlier) contains a vulnerability where AsakusaSatellite API keys are not masked on the job configuration form. Additionally, these keys are stored unencrypted in job config.xml files on the Jenkins controller. This allows unauthorized users ...