Security Advisory

CVE-2022-20620

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-01-12 19:05:58
Last updated 2024-08-03 02:17:52
Assigner jenkins
State PUBLISHED

Description

Missing permission checks in Jenkins SSH Agent Plugin 1.23 and earlier allows attackers with Overall/Read access to enumerate credentials IDs of credentials stored in Jenkins.