CVE-2017-1000245

Critical

Published: 01/11/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The SSH Plugin stores credentials that allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file.

Risk Assessment

Storing passwords in plaintext poses a serious risk of data leakage, which could lead to unauthorized access to remote servers.

Recommendation

It is recommended to encrypt the credentials and restrict access to the configuration file to minimize the risk of information leakage.

Original NVD description (English source)

The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file.