Plaintext Storage of SSH Credentials in Configuration File

Plaintext Storage of SSH Credentials in Configuration File

CVE-2017-1000245 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file.

Learn more about our Cis Benchmark Audit For Server Software.