Executive brief
Jenkins Git client plugin 3.11.0 does not perform SSH host key verification
Affected products
- Maven org.jenkins-ci.plugins:git-client
Junglewise Threat Intelligence
CVE-2022-36881: Jenkins Git client plugin 3.11.0 does not perform SSH host key verification
CVE-2022-36881 · Severity: low · CVSS 3.1 · Published 2022-07-28
Vendors: Maven.
Related threats
- Jenkins Git client Plugin OS command injection in SSH wrapper script
- Jenkins Git client Plugin has an OS command injection vulnerability on agents in Git client Plugin
- Jenkins Git client Plugin file system information disclosure vulnerability
- Improper Neutralization of Special Elements used in an OS Command in Jenkins Git Client Plugin
- Insecure temporary file usage in Jenkins Git Client Plugin