CVE-2017-1000245

2017-11-0113:00:00

mitre

www.cve.org

cve-2017-1000245

ssh plugin

credentials

plaintext

configuration file

AI Score

9.4

Confidence

High

EPSS

0.002

Percentile

59.8%

JSON

The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file.

References

jenkins.io/security/advisory/2017-07-10/