Description
An exposure of sensitive information vulnerability exists in Jenkins SSH Agent Plugin 1.15 and earlier in SSHAgentStepExecution.java that exposes the SSH private key password to users with permission to read the build log.
Remediation
References
https://jenkins.io/security/advisory/2018-07-30/#SECURITY-704
Related Vulnerabilities
CVE-2019-10440 Vulnerability in maven package org.jenkins-ci.plugins:neoload-jenkins-plugin
CVE-2022-34183 Vulnerability in maven package io.jenkins.plugins:agent-server-parameter
CVE-2019-10095 Vulnerability in maven package org.apache.zeppelin:zeppelin
CVE-2023-37903 Vulnerability in npm package vm2
CVE-2016-4567 Vulnerability in maven package org.webjars.bower:mediaelement