| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:ssh-slaves | < 1.15 | 1.15 |
| ssh slaves | < 1.15 | 1.15 |
It was found that jenkins-ssh-slaves-plugin before version 1.15 did not perform host key verification, thereby enabling Man-in-the-Middle attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free