Skip to content
OpenAdvisories

Package · Maven

org.jenkins-ci.plugins:ssh-agent

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 4.3
    CVE-2022-20620

    Missing permission checks in SSH Agent Plugin allow enumerating credentials IDs

    Missing permission checks in Jenkins SSH Agent Plugin 1.23 and earlier allows attackers with Overall/Read access to enumerate credentials IDs of credentials stored in Jenkins.

    Jenkins Project Jenkins SSH Agent Plugin org.jenkins-ci.plugins:ssh-agent Web / CMS Maven
  • Low 3.1
    CVE-2018-1999036

    Jenkins SSH Agent Plugin exposes SSH private key password to users with permission to read the build log

    An exposure of sensitive information vulnerability exists in Jenkins SSH Agent Plugin 1.15 and earlier in SSHAgentStepExecution.java that exposes the SSH private key password to users with permission to read the build log.

    org.jenkins-ci.plugins:ssh-agent Maven