CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1000149

A man in the middle vulnerability exists in Jenkins Ansible Plugin 0.8 and older in AbstractAnsibleInvocation.java, AnsibleAdHocCommandBuilder.java, AnsibleAdHocCommandInvocationTest.java, AnsibleContext.java, AnsibleJobDslExtension.java, AnsiblePlaybookBuilder.java, AnsiblePlaybookStep.java that disables host key verification by default.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 23.2%

CVSS Severity

CVSS v3 Score 5.6

CVSS v2 Score 6.8

References

Products affected by CVE-2018-1000149

Jenkins » Ansible » Version: 0.1

cpe:2.3:a:jenkins:ansible:0.1
Jenkins » Ansible » Version: 0.2

cpe:2.3:a:jenkins:ansible:0.2
Jenkins » Ansible » Version: 0.3

cpe:2.3:a:jenkins:ansible:0.3
Jenkins » Ansible » Version: 0.3.1

cpe:2.3:a:jenkins:ansible:0.3.1
Jenkins » Ansible » Version: 0.4

cpe:2.3:a:jenkins:ansible:0.4
Jenkins » Ansible » Version: 0.5

cpe:2.3:a:jenkins:ansible:0.5
Jenkins » Ansible » Version: 0.6

cpe:2.3:a:jenkins:ansible:0.6
Jenkins » Ansible » Version: 0.6.1

cpe:2.3:a:jenkins:ansible:0.6.1
Jenkins » Ansible » Version: 0.6.2

cpe:2.3:a:jenkins:ansible:0.6.2
Jenkins » Ansible » Version: 0.7

cpe:2.3:a:jenkins:ansible:0.7
Jenkins » Ansible » Version: 0.8

cpe:2.3:a:jenkins:ansible:0.8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1000149

Products

Pricing

Contact Us