En resumen
- CVE-2017-1000245 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a org.jenkins-ci.plugins:ssh, org.jvnet.hudson.plugins:ssh, ssh (jenkins).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.4%, mayor que el 73.3% de las vulnerabilidades.
- Solución: actualizar a 2.5 o posterior.
Description
The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file.
NVD description
The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file.
Más vulnerabilidades de org.jenkins-ci.plugins:ssh
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free