Skip to content
OpenAdvisories

Package · Maven

org.jenkins-ci.plugins:ssh-credentials

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    Exposure of Sensitive Information to an Unauthorized Actor in Jenkins SSH Credentials Plugin

    A arbitrary file read vulnerability exists in Jenkins SSH Credentials Plugin 1.13 and earlier in BasicSSHUserPrivateKey.java that allows attackers with a Jenkins account and the permission to configure credential bindings to read arbitrary files from the Jenk…