Approved changes feed: RSS · Atom
cpe:2.3:a:jenkins:ssh-slave:*:*:*:*:*:docker:*:*
part: a version: * update: *
| Vendor | Jenkins (d708d718-2e77-5ca3-ae9c-38ee4d256744) |
|---|---|
| Product | Ssh Slave (6d0307f9-351a-591b-8fa9-4fe4ede0deec) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | docker |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-32755 |
vulnerable | 2026-06-08 07:19:00.744052 |
Details available
In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH client (typically the Jenkins controller) and SSH build agent to impersonate the latter.
Published: 2025-04-10T11:21:31.212Z
Updated: 2025-04-10T13:20:19.382Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.