CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-24403

A missing permission check in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of Azure credentials stored in Jenkins.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 49.2%

CVSS Severity

CVSS v3 Score 4.3

References

https://www.jenkins.io/security/advisory/2025-01-22/#SECURITY-3094

Products affected by CVE-2025-24403

Jenkins » Azure Service Fabric » Version: 1.0

cpe:2.3:a:jenkins:azure_service_fabric:1.0
Jenkins » Azure Service Fabric » Version: 1.1

cpe:2.3:a:jenkins:azure_service_fabric:1.1
Jenkins » Azure Service Fabric » Version: 1.3

cpe:2.3:a:jenkins:azure_service_fabric:1.3
Jenkins » Azure Service Fabric » Version: 1.4

cpe:2.3:a:jenkins:azure_service_fabric:1.4
Jenkins » Azure Service Fabric » Version: 1.5

cpe:2.3:a:jenkins:azure_service_fabric:1.5
Jenkins » Azure Service Fabric » Version: 1.6

cpe:2.3:a:jenkins:azure_service_fabric:1.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-24403

Products

Pricing

Contact Us