Описание
Jenkins Swarm Plugin Client 3.4 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.4 (включая)
cpe:2.3:a:jenkins:swarm:*:*:*:*:*:jenkins:*:*
EPSS
Процентиль: 9%
0.00033
Низкий
5.9 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 4.8
redhat
больше 8 лет назад
Jenkins Swarm Plugin Client 3.4 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks.
CVSS3: 5.9
github
больше 3 лет назад
Jenkins Swarm Plugin Client vulnerable to man-in-the-middle attacks
EPSS
Процентиль: 9%
0.00033
Низкий
5.9 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-20