| Package | Affected versions | Patched versions |
|---|---|---|
| de.tracetronic.jenkins.plugins:ecutest | < 2.4 | 2.4 |
| tracetronic ecu-test | ≤ 2.3 |
A man in the middle vulnerability exists in Jenkins TraceTronic ECU-TEST Plugin 2.3 and earlier in ATXPublisher.java, ATXValidator.java that allows attackers to impersonate any service that Jenkins connects to.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free