Jenkins Plugin 路径遍历漏洞

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.A path traversal vulnerability exists in Jenkins Publish Over SSH Plugin 1.22 and prior versions. An attacker with...

CVE-2022-23113: Improper Limitation of a Pathname to a Restricted Directory

Jenkins Publish Over SSH Plugin 1.22 and earlier performs a validation of the file name specifying whether it is present or not, resulting in a path traversal vulnerability allowing attackers with Item/Configure permission to discover the name of the Jenkins controller files...

CVE-2022-23114: Insufficiently Protected Credentials

Jenkins Publish Over SSH Plugin 1.22 and earlier stores password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...

Jenkins SSH Plugin Insecure Password Storage Information Disclosure Vulnerability

Jenkins is the open source automation server . Jenkins provides numerous plug-ins that support building, deploying and automating projects. An information disclosure vulnerability exists in the Jenkins SSH plugin. An attacker can exploit the vulnerability to obtain sensitive information and launc...

CloudBees Jenkins SSH Plugin Information Disclosure Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . SSH Plugin is one of t...

CVE-2017-1000245

The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file...

CVE-2017-1000245

The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file...

Design/Logic Flaw

The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file...

CVE-2017-1000245

The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file...

CVE-2017-1000245

The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file...

CVE-2017-1000245

Summary: CVE-2017-1000245 affects the Jenkins SSH Plugin, where user passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file. This credential storage flaw can lead to disclosure of sensitive credentials used to access remote servers. The provided connected...

PT-2017-10938

Name of the Vulnerable Software and Affected Versions SSH Plugin affected versions not specified Description The issue concerns the storage of credentials in plaintext in a configuration file, specifically user passwords and passphrases for encrypted SSH keys, which are used to access remote...

CVE-2017-1000245: Insufficiently Protected Credentials

The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file...

Solaris 10 (x86) : 125252-02

SunOS 5.10x86: libdevinfo patch. Date this patch was last updated by Sun : Jan/10/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...