WaratekVRT Sign in

Jenkins SSH CVEs

15 CVEs, 1 protected by Waratek

Reset
More filters (2)
Columns
Vendor jenkins✕Product ssh✕
Overview 15 matches · 1 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
15matches 1protected6.7% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 1 6.7% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 14 93.3%
Critical 2 13.3% High 2 13.3% Medium 10 66.7% Low 1 6.7% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 6.7% partly blocked 0 0.0% not blocked 14 93.3% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 15 100.0%
split by peak 9 / year
No exploit published: 14Protected by Waratek: 1 Low: 1Medium: 10High: 2Critical: 2 not blocked: 14blocked by ARMR today: 1 No public exploit: 15
20171 No exploit published1 Critical1 not blocked1 No public exploit1 20183 No exploit published3 Medium3 not blocked3 No public exploit3 20190 20200 20210 20229 Protected by Waratek1 No exploit published8 High1 Medium7 Low1 blocked by ARMR today1 not blocked8 No public exploit9 20231 No exploit published1 High1 not blocked1 No public exploit1 20240 20251 No exploit published1 Critical1 not blocked1 No public exploit1
201720182019202020212022202320242025
15 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2025-32754 Critical 2025-04-10 No exploit published No public exploit In jenkins/ssh-agent Docker images 6.11.1 and earlier, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH client (typically the Jenkins controller) and SSH build agent to impersonate the latter.
CVE-2023-41939 High 2023-09-06 No exploit published No public exploit Jenkins SSH2 Easy Plugin 1.4 and earlier does not verify that permissions configured to be granted are enabled, potentially allowing users formerly granted (typically optional permissions, like Overall/Manage) to access functionality they're no longer entitled to.
CVE-2022-30959 Medium 2022-05-17 No exploit published No public exploit A missing permission check in Jenkins SSH Plugin 2.6.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVE-2022-30958 High 2022-05-17 No exploit published No public exploit A cross-site request forgery (CSRF) vulnerability in Jenkins SSH Plugin 2.6.1 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVE-2022-30957 Medium 2022-05-17 No exploit published No public exploit A missing permission check in Jenkins SSH Plugin 2.6.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
CVE-2022-23114 Low 2022-01-12 No exploit published No public exploit Jenkins Publish Over SSH Plugin 1.22 and earlier stores password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.
CVE-2022-23113 Medium 2022-01-12 Protected by Waratek No public exploit Jenkins Publish Over SSH Plugin 1.22 and earlier performs a validation of the file name specifying whether it is present or not, resulting in a path traversal vulnerability allowing attackers with Item/Configure permission to discover the name of the Jenkins controller files.
CVE-2022-23112 Medium 2022-01-12 No exploit published No public exploit A missing permission check in Jenkins Publish Over SSH Plugin 1.22 and earlier allows attackers with Overall/Read access to connect to an attacker-specified SSH server using attacker-specified credentials.
CVE-2022-23111 Medium 2022-01-12 No exploit published No public exploit A cross-site request forgery (CSRF) vulnerability in Jenkins Publish Over SSH Plugin 1.22 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials.
CVE-2022-23110 Medium 2022-01-12 No exploit published No public exploit Jenkins Publish Over SSH Plugin 1.22 and earlier does not escape the SSH server name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Administer permission.
CVE-2022-20620 Medium 2022-01-12 No exploit published No public exploit Missing permission checks in Jenkins SSH Agent Plugin 1.23 and earlier allows attackers with Overall/Read access to enumerate credentials IDs of credentials stored in Jenkins.
CVE-2018-1999036 Medium 2018-08-01 No exploit published No public exploit An exposure of sensitive information vulnerability exists in Jenkins SSH Agent Plugin 1.15 and earlier in SSHAgentStepExecution.java that exposes the SSH private key password to users with permission to read the build log.
CVE-2017-2648 Medium 2018-07-27 No exploit published No public exploit It was found that jenkins-ssh-slaves-plugin before version 1.15 did not perform host key verification, thereby enabling Man-in-the-Middle attacks.
CVE-2018-1000601 Medium 2018-06-26 No exploit published No public exploit A arbitrary file read vulnerability exists in Jenkins SSH Credentials Plugin 1.13 and earlier in BasicSSHUserPrivateKey.java that allows attackers with a Jenkins account and the permission to configure credential bindings to read arbitrary files from the Jenkins master file system.
CVE-2017-1000245 Critical 2017-11-01 No exploit published No public exploit The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file.