https://bugzilla.redhat.com/show_bug.cgi?id=1434329
Bug ID: 1434329
Summary: CVE-2017-2648 jenkins-ssh-slaves-plugin: Host keys
were not verified
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: amaris(a)redhat.com
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msimacek(a)redhat.com,
msrb(a)redhat.com
The SSH Slaves Plugin did not perform host key verification, thereby enabling
Man-in-the-Middle attacks.
External Reference:
https://jenkins.io/security/advisory/2017-03-20/
--
You are receiving this mail because:
You are on the CC list for the bug.