br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1), com.amazon.jenkins.fleet:ec2-fleet (>=1.0, <=1.17.3) +195 more potentially affected by CVE-2018-1000601 via org.jenkins-ci.plugins:ssh-credentials (>=1.0, <=1.13)

org.jenkins-ci.plugins:ssh-credentials MAVEN version =1.0, =1.0, =1.0.5.0, =1.9.2-beta, =1.16, =0.1.0, =1.9, =4.0.9, =0.1.0-alpha5, =1.1.0, =1.0.0, =1.0.1, =1.1.3, =1.7.2, =1.8.2 and more Source cves: CVE-2018-1000601 Source advisory: OSV:GHSA-CWCF-5M5W-MQ2W...

org.jenkins-ci.plugins:git (>=1.6.0-beta-1, <=2.0-beta-2), org.jenkins-ci.plugins:mercurial (>=1.47, <=1.48) +1 more potentially affected by CVE-2018-1000601 via org.jenkins-ci.plugins:credentials (1.7.6)

org.jenkins-ci.plugins:credentials MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:git =1.6.0-beta-1, =1.47, =1.48 -...

br.com.ingenieux.jenkins.plugins:codecommit-url-helper (0.0.1), com.amazon.jenkins.fleet:ec2-fleet (>=1.0, <=1.17.3) +195 more potentially affected by CVE-2018-1000601 via org.jenkins-ci.plugins:ssh-credentials (>=1.0, <=1.13)

org.jenkins-ci.plugins:ssh-credentials MAVEN version =1.0, =1.0, =1.0.5.0, =1.9.2-beta, =1.16, =0.1.0, =1.9, =4.0.9, =0.1.0-alpha5, =1.1.0, =1.0.0, =1.0.1, =1.1.3, =1.7.2, =1.8.2 and more Source cves: CVE-2018-1000601 Source advisory: GHSA-CWCF-5M5W-MQ2W...

org.jenkins-ci.plugins:crx-content-package-deployer (>=1.0, <=1.4), org.jenkins-ci.plugins:ssh-agent (1.1) +1 more potentially affected by CVE-2018-1000601 via org.jenkins-ci.plugins:ssh-credentials (0.3)

org.jenkins-ci.plugins:ssh-credentials MAVEN version 0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:ssh-credentials and may be impacted: - org.jenkins-ci.plugins:crx-content-package-deployer =1.0, =0.24, =0.27 Source cves:...

org.jenkins-ci.plugins:ssh-slaves (0.23) potentially affected by CVE-2018-1000601 via org.jenkins-ci.plugins:ssh-credentials (0.1)

org.jenkins-ci.plugins:ssh-credentials MAVEN version 0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:ssh-credentials and may be impacted: - org.jenkins-ci.plugins:ssh-slaves 0.23 Source cves: CVE-2018-1000601 Source advisory:...

CVE-2022-29810

A flaw was found in go-getter, where the go-getter library can write SSH credentials into its log file. This flaw allows a local user with access to read log files to read sensitive credentials, which may lead to privilege escalation or account takeover...

Information Disclosure

github.com/hashicorp/go-getter is vulnerable to information disclosure. The vulnerability exists in the RedactURL function of url.go, allowing an attacker to read or write SSH credentials through the log file...

GHSA-27RQ-4943-QCWP Insertion of Sensitive Information into Log File in Hashicorp go-getter

The Hashicorp go-getter library before 1.5.11 could write SSH credentials into its logfile, exposing sensitive credentials to local users able to read the logfile...

Insertion of Sensitive Information into Log File in Hashicorp go-getter

The Hashicorp go-getter library before 1.5.11 could write SSH credentials into its logfile, exposing sensitive credentials to local users able to read the logfile...

Exposure of SSH credentials in Rancher/Fleet

Impact This vulnerability only affects customers using Fleet for continuous delivery with authenticated Git and/or Helm repositories. A security vulnerability CVE-2022-29810 was discovered in go-getter library in versions prior to v1.5.11 that exposes SSH private keys in base64 format due to a...

PT-2022-19843 · Hashicorp · Go-Getter

Name of the Vulnerable Software and Affected Versions: Hashicorp go-getter library versions prior to 1.5.11 Description: The issue concerns the Hashicorp go-getter library, where SSH credentials could be written into its logfile. This exposes sensitive credentials to local users who have the...

org.jenkins-ci.plugins:git (>=1.6.0-beta-1, <=2.0-beta-2), org.jenkins-ci.plugins:mercurial (>=1.47, <=1.48) +1 more potentially affected by CVE-2022-29036 via org.jenkins-ci.plugins:credentials (1.7.6)

org.jenkins-ci.plugins:credentials MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:git =1.6.0-beta-1, =1.47, =1.48 -...

org.jenkins-ci.plugins:git-client (1.6.2), org.jenkins-ci.plugins:ssh-agent (>=1.4.1, <=1.4.2) +1 more potentially affected by CVE-2022-29036 via org.jenkins-ci.plugins:credentials (1.9.2)

org.jenkins-ci.plugins:credentials MAVEN version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:git-client 1.6.2 - org.jenkins-ci.plugins:ssh-agent =1.4.1, =1.4.2 -...

CVE-2022-0738

An issue has been discovered in GitLab affecting all versions starting from 14.6 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versions starting from 14.8 before 14.8.2. GitLab was leaking user passwords when adding mirrors with SSH credentials under specific conditions...

CVE-2022-0738

An issue has been discovered in GitLab affecting all versions starting from 14.6 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versions starting from 14.8 before 14.8.2. GitLab was leaking user passwords when adding mirrors with SSH credentials under specific conditions...

UBUNTU-CVE-2022-0738

An issue has been discovered in GitLab affecting all versions starting from 14.6 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versions starting from 14.8 before 14.8.2. GitLab was leaking user passwords when adding mirrors with SSH credentials under specific conditions...

CVE-2022-0738

An issue has been discovered in GitLab affecting all versions starting from 14.6 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versions starting from 14.8 before 14.8.2. GitLab was leaking user passwords when adding mirrors with SSH credentials under specific conditions...

CVE-2022-0738

An issue has been discovered in GitLab affecting all versions starting from 14.6 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versions starting from 14.8 before 14.8.2. GitLab was leaking user passwords when adding mirrors with SSH credentials under specific conditions...

CVE-2022-0738: Insufficiently Protected Credentials

An issue has been discovered in GitLab affecting all versions starting from 14.6 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versions starting from 14.8 before 14.8.2. GitLab was leaking user passwords when adding mirrors with SSH credentials under specific conditions...

Gitlab -- multiple vulnerabilities

Gitlab reports: Runner registration token disclosure through Quick Actions Unprivileged users can add other users to groups through an API endpoint Inaccurate display of Snippet contents can be potentially misleading to users Environment variables can be leaked via the sendmail delivery method...