Ssh Agent

ssh_agent

Vendor: Jenkins • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-32754 1Jenkins 1Ssh Agent Jun 17, 2026 Apr 10, 2025 N/A· v4 9.1 CRITICAL· v3 N/A· v2 In jenkins/ssh-agent Docker images 6.11.1 and earlier, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allo...Show more In jenkins/ssh-agent Docker images 6.11.1 and earlier, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH client (typically the Jenkins controller) and SSH build agent to impersonate the latter.Show less
CVE-2022-20620 1Jenkins 1Ssh Agent Jun 17, 2026 Jan 12, 2022 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 Missing permission checks in Jenkins SSH Agent Plugin 1.23 and earlier allows attackers with Overall/Read access to enumerate credentials IDs of credentials stored in Jenkins.
CVE-2018-1999036 1Jenkins 1Ssh Agent Nov 21, 2024 Aug 1, 2018 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 An exposure of sensitive information vulnerability exists in Jenkins SSH Agent Plugin 1.15 and earlier in SSHAgentStepExecution.java that exposes the SSH private key password to users with permission to read the build lo...Show more An exposure of sensitive information vulnerability exists in Jenkins SSH Agent Plugin 1.15 and earlier in SSHAgentStepExecution.java that exposes the SSH private key password to users with permission to read the build log.Show less