CVE-2019-16546

Jenkins Google Compute Engine Plugin 4.1.1 and earlier does not verify SSH host keys when connecting agents created by the plugin, enabling man-in-the-middle…

published November 21, 2019

CVSS
—
EPSS
1%
Percentile
58.3
In the wild
Unconfirmed
What it is

Jenkins Google Compute Engine Plugin 4.1.1 and earlier does not verify SSH host keys when connecting agents created by the plugin, enabling man-in-the-middle attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00868 · 58.3th percentile
Published
2019-11-21T14:11Z
EPSS history
Timeline
  • 21 NOV 14:11Z
    Jenkins Google Compute Engine Plugin 4.1.1 and earlier does not verify SSH host keys when connecting agents created by the plugin, enabling man-in-the-middle…
    cvelistv5