CVE-2017-2648

It was found that jenkins-ssh-slaves-plugin before version 1.15 did not perform host key verification, thereby enabling Man-in-the-Middle attacks...

CVE-2017-2648

It was found that jenkins-ssh-slaves-plugin before version 1.15 did not perform host key verification, thereby enabling Man-in-the-Middle attacks...

CVE-2017-2648

The CVE-2017-2648 issue affects the Jenkins SSH Slaves Plugin; before version 1.15 it did not verify host keys, enabling Man-in-the-Middle attacks. Impact is network-based, with potential for interception of communications between the master and agents. The commonly cited remediation is to upgrad...

CVE-2017-2648

It was found that jenkins-ssh-slaves-plugin before version 1.15 did not perform host key verification, thereby enabling Man-in-the-Middle attacks...