Skip to content
Sign in
Not rated

CVE-2020-2146 Jenkins Mac Plugin 1.1.0 and earlier does not validate SSH host keys when connecting agents created by the plugin,…

Description

Jenkins Mac Plugin 1.1.0 and earlier does not validate SSH host keys when connecting agents created by the plugin, enabling man-in-the-middle attacks.

Affected products and versions

Product Affected versions Fixed in
Jenkins Mac Plugin 1.1 earliest → 1.1.0 No fix stated

Other CVEs of Jenkins Mac Plugin

The 3 CVEs of Jenkins Mac Plugin →
CVE-2020-2148 A missing permission check in Jenkins Mac Plugin 1.1.0 and earlier allows attackers with Overall/Read permission to… Not rated CVE-2020-2147 A cross-site request forgery vulnerability in Jenkins Mac Plugin 1.1.0 and earlier allows attackers to connect to an… Not rated
Track this CVE