Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-14377

Verve Asset Manager – Plaintext Storage Vulnerabilities

Description

A security issue was discovered within the legacy Ansible playbook component of Verve Asset Manager, caused by plaintext secrets incorrectly stored when a playbook is running. This component has been retired and has been optional since the 1.36 release in 2024.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rockwell Automation Verve Asset Manager

Default version status: unaffected

  • 1.33 1.34 1.35 1.36 1.37 1.38 1.39 1.40 1.41 1.41.1 1.41.2 1.41.3affected

References