What is CVE-2025-31724?

CVE-2025-31724 is a medium-severity vulnerability in Jenkins Cadence_vmanager, classified under Plaintext Storage of a Password. CVSS score: 4.3/10. Published 2025-04-02.

How severe is CVE-2025-31724?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Vulnerability in Jenkins Cadence_vmanager

CVE-2025-31724

Jenkins Cadence vManager Plugin 4.0.0-282.v5096a_c2db_275 and earlier stores Verisium Manager vAPI keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or acces…

EPSS: 0.003 (20.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Jenkins Cadence_vmanager
Jenkins Project Cadence Vmanager Plugin — versions 0

Weakness classification (CWE)

CWE-256 — Plaintext Storage of a Password

References

jenkinsci-cert@googlegroups.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2025-31724?: CVE-2025-31724 is a medium-severity vulnerability in Jenkins Cadence_vmanager, classified under Plaintext Storage of a Password. CVSS score: 4.3/10. Published 2025-04-02.
How severe is CVE-2025-31724?: Medium severity. CVSS v3 base score is 4.3 out of 10.