medium5.6
CVE-2020-2185
Jenkins Amazon EC2 Plugin 1.50.1 and earlier does not validate SSH host keys when connecting agents, enabling man-in-the-middle attacks.
Impact
Jenkins Amazon EC2 Plugin 1.50.1 and earlier does not validate SSH host keys when connecting agents, enabling man-in-the-middle attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Amazon Ec2 | through 1.50.1 |