description: Missing permission checks in Jenkins SSH Agent Plugin 1.23 and earlier allows attackers with Overall/Read access to enumerate credentials IDs of credentials stored in Jenkins.
affected:
{
product: Jenkins SSH Agent Plugin
vendor: Jenkins project
versions:
lessThanOrEqual: 1.23, status: affected, version: unspecified, versionType: custom
status: unaffected, version: 1.22.1
}