GCVE - cpe:2.3:a:jenkins:ssh:*:*:*:*:*:jenkins:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:ssh:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

Vendor	Jenkins (`d708d718-2e77-5ca3-ae9c-38ee4d256744`)
Product	Ssh (`888d917f-c285-5d18-a25a-d76885544cce`)
Edition	*
Language	*
Software edition	*
Target software	jenkins
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/jenkinsci/ssh-plugin`	purl2cpe	2026-06-01 10:14:16.665584

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-30959`	vulnerable	2026-06-08 05:43:39.883241	Details available A missing permission check in Jenkins SSH Plugin 2.6.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Published: 2022-05-17T14:06:32.000Z Updated: 2024-08-03T07:03:39.400Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2093	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-30958`	vulnerable	2026-06-08 05:43:39.882841	Details available A cross-site request forgery (CSRF) vulnerability in Jenkins SSH Plugin 2.6.1 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Published: 2022-05-17T14:06:29.000Z Updated: 2024-08-03T07:03:39.918Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2093	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-30957`	vulnerable	2026-06-08 05:43:39.882356	Details available A missing permission check in Jenkins SSH Plugin 2.6.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Published: 2022-05-17T14:06:27.000Z Updated: 2024-08-03T07:03:39.880Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2315 http://www.openwall.com/lists/oss-security/2022/05/17/8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1000245`	vulnerable	2026-06-08 05:08:34.316566	Details available The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file. Published: 2017-11-01T13:00:00.000Z Updated: 2024-09-16T22:45:59.420Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2017-07-10/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.