Jenkins SSH Agent Plugin

1 result · Clear filters · Feed

• Medium 4.3
  CVE-2022-20620

  Missing permission checks in SSH Agent Plugin allow enumerating credentials IDs

  Missing permission checks in Jenkins SSH Agent Plugin 1.23 and earlier allows attackers with Overall/Read access to enumerate credentials IDs of credentials stored in Jenkins.

  Jenkins Project Jenkins SSH Agent Plugin org.jenkins-ci.plugins:ssh-agent Web / CMS Maven
  Jan 12, 2022