CVE-2020-2185

Jenkins Amazon EC2 Plugin 1.50.1 and earlier does not validate SSH host keys when connecting agents, enabling man-in-the-middle attacks...

CVE-2020-2185

CVE-2020-2185 – Jenkins Amazon EC2 Plugin : Affects Jenkins Amazon EC2 Plugin versions 1.50.1 and earlier. The issue is a lack of SSH host key validation when connecting agents, enabling potential man‑in‑the‑middle attacks. The connected Red Hat, OSV, GHSA, CNVD, and other entries corroborate the...