| |
Vulnerability CVE-2022-36881
Published: 2022-07-27
| Description: |
Jenkins Git client Plugin 3.11.0 and earlier does not perform SSH host key verification when connecting to Git repositories via SSH, enabling man-in-the-middle attacks. |
Type:
CWE-322 (Key Exchange without Entity Authentication)
References: |
https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-1468
|
|
|
Copyright 2025, cxsecurity.com
|
|
|
