Question: What is CVE-2025-24397?
Answer: CVE-2025-24397 is a vulnerability classified as medium with a CVSS score of 4.3. It falls under CWE-863 and affects the system as follows: An incorrect permission check in Jenkins GitLab Plugin 1.9.6 and earlier allows attackers with global Item/Configure permission (while lacking Item/Configure permission on any particular job) to enumerate credential IDs of GitLab API token and Secret text credentials stored in Jenkins.