CVE-2018-1000601

The CVE-2018-1000601 case concerns Jenkins SSH Credentials Plugin (versions 1.13 and earlier). The vulnerability is an arbitrary file read in BasicSSHUserPrivateKey.java that allows attackers who have a Jenkins account and the permission to configure credential bindings to read arbitrary files fr...