CVE-2025-14377 — Verve Asset Manager – Plaintext Storage Vulnerabilities

CVE-2025-14377

Verve Asset Manager – Plaintext Storage Vulnerabilities PUBLISHED

Description (CNA)

A security issue was discovered within the legacy Ansible playbook component of Verve Asset Manager, caused by plaintext secrets incorrectly stored when a playbook is running. This component has been retired and has been optional since the 1.36 release in 2024.

Affected (CNA)

Vendor / product	Versions
Rockwell Automation / Verve Asset Manager	affected 1.33 1.34 1.35 1.36 1.37 1.38 1.39 1.40 1.41 1.41.1 1.41.2 1.41.3

CWE

CWE-312

References

https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1767.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.