PT-2025-15974 · Unknown+1 · Jenkins/Ssh-Slave+1

Abhishek Reddypalle · Published 2025-04-10 · Updated 2025-04-14 · CVE-2025-32755

Positive Technologies (AI Summary)

CVSS v3.1

9.4

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions: Jenkins/ssh-slave Docker images based on Debian (affected versions not specified)

Description: The issue arises from SSH host keys being generated on image creation for Jenkins/ssh-slave Docker images based on Debian. This results in all containers based on images of the same version using the same SSH host keys. An attacker who can insert themselves into the network path between the SSH client, typically the Jenkins controller, and the SSH build agent, can impersonate the latter.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-338

Related Identifiers

BDU:2025-04589

CVE-2025-32755

Affected Products

Debian

Jenkins/Ssh-Slave

References · 15

• https://bdu.fstec.ru/vul/2025-04589 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-32755 · Security Note
• https://jenkins.io/security/advisory/2025-04-10/#SECURITY-3565 · Vendor Advisory
• https://t.me/cvenotify/118578 · Telegram Post
• https://t.me/purp_sec/499 · Telegram Post
• https://twitter.com/CVEnew/status/1910296060414865835 · Twitter Post
• https://twitter.com/threatsbank/status/1911691908251865398 · Twitter Post
• https://t.me/cvedetector/22648 · Telegram Post
• https://twitter.com/fletch_ai/status/1910951131276337331 · Twitter Post
• https://twitter.com/SystemTek_UK/status/1911103655559807302 · Twitter Post
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0006 · Note
• https://twitter.com/the_yellow_fall/status/1910529817461838031 · Twitter Post
• https://twitter.com/cybercronai/status/1910366415393034581 · Twitter Post
• https://twitter.com/cybercronai/status/1910393009721483656 · Twitter Post
• https://t.me/cvetracker/21321 · Telegram Post