Not rated
CVE-2023-37948 Jenkins Oracle Cloud Infrastructure Compute Plugin 1.0.16 and earlier does not validate SSH host keys when connecting…
Description
Jenkins Oracle Cloud Infrastructure Compute Plugin 1.0.16 and earlier does not validate SSH host keys when connecting OCI clouds, enabling man-in-the-middle attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Oracle Cloud Infrastructure Compute Plugin 1.0 | earliest → 1.0.16 | No fix stated |