CVE-2025-14377

Cleartext Storage of Sensitive Information (CWE-312)

2026-01-20 PSIRT@rockwellautomation.com

Information Disclosure

Lifecycle Timeline

2

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 20, 2026 - 14:16 nvd

N/A

DescriptionCVE.org

A security issue was discovered within the legacy Ansible playbook component of Verve Asset Manager, caused by plaintext secrets incorrectly stored when a playbook is running. This component has been retired and has been optional since the 1.36 release in 2024.

Analysis

A security issue was discovered within the legacy Ansible playbook component of Verve Asset Manager, caused by plaintext secrets incorrectly stored when a playbook is running. This component has been retired and has been optional since the 1.36 release in 2024.

Technical ContextAI

Classified as CWE-312 (Cleartext Storage of Sensitive Information). A security issue was discovered within the legacy Ansible playbook component of Verve Asset Manager, caused by plaintext secrets incorrectly stored when a playbook is running. This component has been retired and has been optional since the 1.36 release in 2024.

Affected ProductsAI

Component: legacy Ansible playbook.

RemediationAI

Monitor vendor advisories for a patch.

Same weakness CWE-312 – Cleartext Storage of Sensitive Information

View all

CVE-2025-22896 CRITICAL POC

CVE-2023-31069 CRITICAL POC

CVE-2022-26148 CRITICAL POC

CVE-2021-29954 CRITICAL POC

CVE-2020-5723 CRITICAL POC

CVE-2019-19228 CRITICAL POC

CVE-2019-13096 CRITICAL POC

CVE-2019-11384 CRITICAL POC

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

CVE-2017-5638 CRITICAL POC

CVE-2025-24813 CRITICAL POC

CVE-2015-1701 HIGH POC

CVE-2017-0147 HIGH POC

CVE-2014-6324 HIGH POC

CVE-2023-7028 CRITICAL POC

CVE-2017-0213 HIGH POC

Share

CVE-2025-14377 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy