org.jenkins-ci.plugins:ssh

4 results · Feed

• High 7.1
  CVE-2022-30959

  Missing Authorization in Jenkins SSH plugin

  A missing permission check in Jenkins SSH Plugin 2.6.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials sto…

  Jenkins Project Jenkins SSH Plugin org.jenkins-ci.plugins:ssh Web / CMS Maven
  May 17, 2022
• High 7.1
  CVE-2022-30958

  Cross Site Request Forgery in Jenkins SSH Plugin

  A cross-site request forgery (CSRF) vulnerability in Jenkins SSH Plugin 2.6.1 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in…

  Jenkins Project Jenkins SSH Plugin org.jenkins-ci.plugins:ssh Web / CMS Maven
  May 17, 2022
• Medium 4.3
  CVE-2022-30957

  Missing permission check in Jenkins SSH Plugin

  A missing permission check in Jenkins SSH Plugin 2.6.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

  Jenkins Project Jenkins SSH Plugin org.jenkins-ci.plugins:ssh Web / CMS Maven
  May 17, 2022
• Critical 9.8
  CVE-2017-1000245

  Jenkins SSH Plugin user passwords for encrypted SSH keys stored in plaintext

  The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file.

  org.jenkins-ci.plugins:ssh org.jvnet.hudson.plugins:ssh Maven
  Nov 1, 2017