Product · Jenkins Project

jenkins-ssh-slaves-plugin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.8

CVE-2017-2648

Jenkins SSH Build Agents Plugin did not verify host keys

It was found that jenkins-ssh-slaves-plugin before version 1.15 did not perform host key verification, thereby enabling Man-in-the-Middle attacks.

Jenkins Project jenkins-ssh-slaves-plugin org.jenkins-ci.plugins:ssh-slaves Web / CMS Maven

Jul 27, 2018