jenkins ssh credentials vulnerabilities

Latest jenkins ssh credentials CVEs

Newest publication first

1. CVE-2018-1000601 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins SSH Credentials Plugin

   Published 2018-06-26

   Medium·CVSS 6.5 EPSS 1.0%

   A arbitrary file read vulnerability exists in Jenkins SSH Credentials Plugin 1.13 and earlier in BasicSSHUserPrivateKey.java that allows attackers with a Jenkins account and the permission to configure credential bindings to read arbitrary files from the Jenkins master file syste...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.