Lucene search
K

87 matches found

CNVD
CNVD
added 2017/11/07 12:0 a.m.2 views

CloudBees Jenkins SSH Plugin Information Disclosure Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . SSH Plugin is one of t...

9.8CVSS6.8AI score0.00061EPSS
Exploits0References1
NVD
NVD
added 2017/11/01 1:29 p.m.9 views

CVE-2017-1000245

The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file...

9.8CVSS9.4AI score0.00061EPSS
Exploits0References1
OSV
OSV
added 2017/11/01 1:29 p.m.12 views

CVE-2017-1000245

The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file...

9.8CVSS6.7AI score
Exploits0References1
Prion
Prion
added 2017/11/01 1:29 p.m.14 views

Design/Logic Flaw

The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file...

5CVSS9.3AI score0.00061EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2017/11/01 1:0 p.m.16 views

CVE-2017-1000245

The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file...

9.4AI score0.00061EPSS
Exploits0References1
CVE
CVE
added 2017/11/01 1:0 p.m.72 views

CVE-2017-1000245

Summary: CVE-2017-1000245 affects the Jenkins SSH Plugin, where user passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file. This credential storage flaw can lead to disclosure of sensitive credentials used to access remote servers. The provided connected...

9.8CVSS9.3AI score0.00061EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2008/01/18 12:0 a.m.19 views

Solaris 10 (x86) : 125252-02

SunOS 5.10x86: libdevinfo patch. Date this patch was last updated by Sun : Jan/10/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

7.2CVSS7AI score0.00048EPSS
Exploits0References2
Rows per page
Query Builder