CVE-2022-23114

Jenkins Publish Over SSH Plugin 1.22 and earlier stores password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.

• CWE-522

• http://www.openwall.com/lists/oss-security/2022/01/12/6Mailing List, Third Party Advisory
• https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2291Vendor Advisory
• http://www.openwall.com/lists/oss-security/2022/01/12/6Mailing List, Third Party Advisory
• https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2291Vendor Advisory

Published

Jan 12, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23109Jenkins HashiCorp Vault Plugin 3.7.0 and earlier does not ma…6.5
• CVE-2022-2311The Find and Replace All WordPress plugin before 1.3 does no…6.1
• CVE-2022-23110Jenkins Publish Over SSH Plugin 1.22 and earlier does not es…4.8
• CVE-2022-23111A cross-site request forgery (CSRF) vulnerability in Jenkins…4.3
• CVE-2022-23112A missing permission check in Jenkins Publish Over SSH Plugi…6.5
• CVE-2022-23113Jenkins Publish Over SSH Plugin 1.22 and earlier performs a …4.3
• CVE-2022-23115Cross-site request forgery (CSRF) vulnerabilities in Jenkins…5.4
• CVE-2022-23116Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements f…7.5
• CVE-2022-23117Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements f…7.5
• CVE-2022-23118Jenkins Debian Package Builder Plugin 1.6.11 and earlier imp…8.8
• CVE-2022-23119A directory traversal vulnerability in Trend Micro Deep Secu…7.5
• CVE-2022-2312The Student Result or Employee Database WordPress plugin bef…5.4