CVE-2025-68703

CVE-2025-68703 describes a cryptographic weakness in the Jervis library (used by Jenkins Job DSL plugin and shared pipeline libraries) prior to version 2.2. The vulnerability stems from the salt for key derivation being directly tied to the passphrase, leading to identical encryption keys for the same password. This allows an attacker to potentially decrypt sensitive information. With a CVSS score of 7.5 (High), this vulnerability has a network attack vector and low attack complexity, allowing for high confidentiality impact without requiring user interaction. The FAUCET Risk Score of 85/100 further emphasizes its severity. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, which is typical for the vast majority of CVEs.