{"action":"Upgrade org.jenkins-ci.plugins:credentials to 2.1.17 or later.","affected":[{"fixed":"2.1.17","introduced":"0"}],"component":"org.jenkins-ci.plugins:credentials","cve_ids":["CVE-2018-1000601"],"ecosystem":"Maven","epss":0.01013,"exploited":false,"fixed_versions":["2.1.17"],"ghsa_id":"GHSA-cwcf-5m5w-mq2w","id":"tcs_01M5N8TG0TMK8H4VCFGRBPBKSS","modified_at":"2024-02-16T08:05:34.897390Z","published_at":"2022-05-14T03:07:03Z","references":["https://osv.dev/vulnerability/GHSA-cwcf-5m5w-mq2w","https://nvd.nist.gov/vuln/detail/CVE-2018-1000601","https://github.com/jenkinsci/credentials-plugin/commit/23fbd6de33cc3cb74eafd44e7b27dd87b52c8904","https://github.com/jenkinsci/ssh-credentials-plugin/commit/18b3121fa94a174064447d637dc11539e33b3a76","https://github.com/jenkinsci/ssh-credentials-plugin","https://github.com/jenkinsci/ssh-credentials-plugin/commits/ssh-credentials-1.14","https://jenkins.io/security/advisory/2018-06-25/#SECURITY-440"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-cwcf-5m5w-mq2w#Maven/org.jenkins-ci.plugins:credentials","url":"https://osv.dev/vulnerability/GHSA-cwcf-5m5w-mq2w"}],"summary":"Exposure of Sensitive Information to an Unauthorized Actor in Jenkins SSH Credentials Plugin"}