Description
The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.jenkins-ci.plugins:ssh | < 2.5 | 2.5 | GHSA-5gmf-8gh2-hhfp |
| Maven | org.jvnet.hudson.plugins:ssh | <= 2.3 | — | GHSA-5gmf-8gh2-hhfp |