Mac Security Vulnerabilities and Issues — Mac CVE List

Lucene search

JenkinsMac

3 matches found

CVE•added 2020/03/09 4:15 p.m.•69 views

CVE-2020-2146

Jenkins Mac Plugin 1.1.0 and earlier does not validate SSH host keys when connecting agents created by the plugin, enabling man-in-the-middle attacks.

7.4CVSS7.3AI score0.00034EPSS

CVE•added 2020/03/09 4:15 p.m.•66 views

CVE-2020-2148

A missing permission check in Jenkins Mac Plugin 1.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified SSH server using attacker-specified credentials.

4.3CVSS4.4AI score0.00052EPSS

CVE•added 2020/03/09 4:15 p.m.•64 views

CVE-2020-2147

A cross-site request forgery vulnerability in Jenkins Mac Plugin 1.1.0 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials.

4.3CVSS4.5AI score0.00305EPSS