Security Advisory
CVE-2022-20620
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Missing permission checks in Jenkins SSH Agent Plugin 1.23 and earlier allows attackers with Overall/Read access to enumerate credentials IDs of credentials stored in Jenkins.