Executive brief
Arbitrary shell command execution in Jenkins EC2 Plugin
Affected products
- Maven org.jenkins-ci.plugins:ec2
Junglewise Threat Intelligence
CVE-2017-1000502: Arbitrary shell command execution in Jenkins EC2 Plugin
CVE-2017-1000502 · Severity: low · CVSS 3 · Published 2022-05-14
Technologies: org.jenkins-ci.plugins:ec2 (Maven). Vendors: Maven.
Related threats
- Lack of SSL/TLS certificate and hostname validation in Amazon EC2 Plugin
- Users with Overall/Read access can enumerate credentials IDs in Amazon EC2 Plugin
- CSRF vulnerability in Amazon EC2 Plugin
- Missing SSH host key validation in Jenkins Amazon EC2 Plugin
- Missing permission checks in Jenkins Amazon EC2 Plugin