CVE-2018-1000601
CVE-2018-1000601
A arbitrary file read vulnerability exists in Jenkins SSH Credentials Plugin 1.13 and earlier in BasicSSHUserPrivateKey.java that allows attackers with a Jenkins account and the permission to configure credential bindings to read arbitrary files from the Jenkins master file system.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →