Search/CVE-2025-31728
● CVE — Medium

CVE-2025-31728

Jenkins AsakusaSatellite Plugin 0.1.1 and earlier does not mask AsakusaSatellite API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

View graph Watch Export
CVSS v3.1
5.5 MEDIUM
EPSS
0.28%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
EPSS Trend
Aug 16, 2026 → Aug 30, 2026
● 0.00pp
0.28% → 0.28% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionREQUIRED
ScopeUNCHANGED
ConfidentialityLOW
IntegrityLOW
AvailabilityLOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Connections
2 relationships
Timeline
disclosure → media coverage
Apr 2, 2025
Disclosure — published as a CVE record. · last revised by NVD Apr 17, 2025