Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2017-1000397

Jenkins Maven Plugin 2.17 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks. Maven Plugin 3.0 no longer has a dependency on commons-httpclient.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 7.9%
CVSS Severity
CVSS v3 Score 5.9
CVSS v2 Score 4.3
Products affected by CVE-2017-1000397
  • Jenkins » Maven » Version: 0.14.0
    cpe:2.3:a:jenkins:maven:0.14.0
  • Jenkins » Maven » Version: 0.16.1
    cpe:2.3:a:jenkins:maven:0.16.1
  • Jenkins » Maven » Version: 2.0
    cpe:2.3:a:jenkins:maven:2.0
  • Jenkins » Maven » Version: 2.0.1
    cpe:2.3:a:jenkins:maven:2.0.1
  • Jenkins » Maven » Version: 2.0.2
    cpe:2.3:a:jenkins:maven:2.0.2
  • Jenkins » Maven » Version: 2.0.3
    cpe:2.3:a:jenkins:maven:2.0.3
  • Jenkins » Maven » Version: 2.0.4
    cpe:2.3:a:jenkins:maven:2.0.4
  • Jenkins » Maven » Version: 2.1
    cpe:2.3:a:jenkins:maven:2.1
  • Jenkins » Maven » Version: 2.10
    cpe:2.3:a:jenkins:maven:2.10
  • Jenkins » Maven » Version: 2.11
    cpe:2.3:a:jenkins:maven:2.11
  • Jenkins » Maven » Version: 2.12
    cpe:2.3:a:jenkins:maven:2.12
  • Jenkins » Maven » Version: 2.12.1
    cpe:2.3:a:jenkins:maven:2.12.1
  • Jenkins » Maven » Version: 2.13
    cpe:2.3:a:jenkins:maven:2.13
  • Jenkins » Maven » Version: 2.14
    cpe:2.3:a:jenkins:maven:2.14
  • Jenkins » Maven » Version: 2.15
    cpe:2.3:a:jenkins:maven:2.15
  • Jenkins » Maven » Version: 2.15.1
    cpe:2.3:a:jenkins:maven:2.15.1
  • Jenkins » Maven » Version: 2.16
    cpe:2.3:a:jenkins:maven:2.16
  • Jenkins » Maven » Version: 2.17
    cpe:2.3:a:jenkins:maven:2.17
  • Jenkins » Maven » Version: 2.2
    cpe:2.3:a:jenkins:maven:2.2
  • Jenkins » Maven » Version: 2.3
    cpe:2.3:a:jenkins:maven:2.3
  • Jenkins » Maven » Version: 2.4
    cpe:2.3:a:jenkins:maven:2.4
  • Jenkins » Maven » Version: 2.5
    cpe:2.3:a:jenkins:maven:2.5
  • Jenkins » Maven » Version: 2.6
    cpe:2.3:a:jenkins:maven:2.6
  • Jenkins » Maven » Version: 2.7
    cpe:2.3:a:jenkins:maven:2.7
  • Jenkins » Maven » Version: 2.8
    cpe:2.3:a:jenkins:maven:2.8
  • Jenkins » Maven » Version: 2.9
    cpe:2.3:a:jenkins:maven:2.9


Products
Pricing
Contact Us

Shodan ® - All rights reserved