| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.main:jenkins-core | ≥ 2.34, < 2.44< 2.32.2 | 2.442.32.2 |
| jenkins | < 2.32.2< 2.44 | 2.32.22.44 |
Jenkins before versions 2.44 and 2.32.2 uses AES ECB block cipher mode without IV for encrypting secrets which makes Jenkins and the stored secrets vulnerable to unnecessary risks (SECURITY-304).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free