Vulnerability Details CVE-2020-2146
Jenkins Mac Plugin 1.1.0 and earlier does not validate SSH host keys when connecting agents created by the plugin, enabling man-in-the-middle attacks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 8.4%
CVSS Severity
CVSS v3 Score 7.4
CVSS v2 Score 5.8
Products affected by CVE-2020-2146
-
cpe:2.3:a:jenkins:mac:1.0
-
cpe:2.3:a:jenkins:mac:1.0.0
-
cpe:2.3:a:jenkins:mac:1.0.1
-
cpe:2.3:a:jenkins:mac:1.0.2
-
cpe:2.3:a:jenkins:mac:1.1.0