CVE-2025-31725

The Jenkins monitor-remote-job Plugin 1.0 contains an access control deficiency that causes it to store passwords unencrypted in config.xml files on the Jenkins controller. This allows unauthorized users with Extended Read permissions, or those with direct access to the Jenkins controller file sy...

PT-2025-14515 · Jenkins +1 · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins monitor-remote-job Plugin version 1.0 Description: The issue allows passwords to be stored unencrypted in job config.xml files on the Jenkins controller. These passwords can be viewed by users with Extended Read permission or those wh...