jenkins Vulnerabilities and Affected Products
Vulnerabilities associated with jenkins-ssh-slaves-plugin.
Products
Clear product- jenkins11 vulnerabilities
- Jenkins Code Dx Plugin5 vulnerabilities
- cas2 vulnerabilities
- Script Security Plugin2 vulnerabilities
- script_security2 vulnerabilities
- blazemeter_plugin1 vulnerability
- docker1 vulnerability
- git_server1 vulnerability
- github1 vulnerability
- gitlab_hook1 vulnerability
- groovy1 vulnerability
- icescrum1 vulnerability
- Jenkins Command Line Interface (CLI)1 vulnerability
- Jenkins Stapler Web Framework1 vulnerability
- Jenkins User Interface (UI)1 vulnerability
- jenkins-mailer-plugin1 vulnerability
- jenkins-ssh-slaves-plugin1 vulnerability
- jenkins-telegram-bot1 vulnerability
- Matrix Project Plugin1 vulnerability
- mattermost1 vulnerability
- openid1 vulnerability
- openshift-sync-plugin1 vulnerability
- pipeline\1 vulnerability
- shared_library_version_override1 vulnerability
- subversion_partial_release_manager1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2017-2648MEDIUM | Jenkins SSH Build Agents Plugin did not verify host keysIt was found that jenkins-ssh-slaves-plugin before version 1.15 did not perform host key verification, thereby enabling Man-in-the-Middle attacks. CWE-295Jul 27, 2018 | CVSS6.8v3.0 | EPSS1.42% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |