CVE-2025-31720
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Apr 2, 2025
Updated: Apr 7, 2025
CWE ID 862
Summary
CVE-2025-31720 is a vulnerability affecting Jenkins versions 2.503 and earlier, as well as LTS 2.492.2 and earlier. This issue stems from a missing permission check, which enables attackers holding Computer/Create permissions but lacking Computer/Extended Read permissions to illicitly copy a Jenkins agent. By doing so, unauthorized users can gain access to the agent's configuration, potentially leading to security breaches and unintended system modifications.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Jenkins Software
Affected Vendors
- Jenkins