CVE-2017-2648CWE-295

It was found that jenkins-ssh-slaves-plugin before version 1.15 did not perform host key verification, thereby enabling Man-in-the-Middle attacks

Medium · published July 27, 2018

CVSS v3.0
6.8
EPSS
1%
Percentile
72.7
In the wild
Unconfirmed
What it is

It was found that jenkins-ssh-slaves-plugin before version 1.15 did not perform host key verification, thereby enabling Man-in-the-Middle attacks.

The record
Technical detail
CVSS v3.0
6.8 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01423 · 72.7th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2018-07-27T20:00Z
EPSS history
Timeline
  • 27 JUL 20:00Z
    It was found that jenkins-ssh-slaves-plugin before version 1.15 did not perform host key verification, thereby enabling Man-in-the-Middle attacks
    cvelistv5