Jenkins SSH Plugin user passwords for encrypted SSH keys stored in plaintext

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2017-1000245 · ADVISORY
• jenkins.io/security/advisory/2017-07-10 · WEB
• jenkins.io/security/advisory/2017-07-10 · Third Party Advisory

org.jenkins-ci.plugins:ssh のその他の脆弱性

• CVE-2022-30959中 6.5A missing permission check in Jenkins SSH Plugin 2.6.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-s…
• CVE-2022-30958高 8.8A cross-site request forgery (CSRF) vulnerability in Jenkins SSH Plugin 2.6.1 and earlier allows attackers to connect to an attacker-specifi…
• CVE-2022-30957中 4.3A missing permission check in Jenkins SSH Plugin 2.6.1 and earlier allows attackers with Overall/Read permission to enumerate credentials ID…