CVE-2018-1000149 | BDVDB-2026-99005 Detail

Description#

A man in the middle vulnerability exists in Jenkins Ansible Plugin 0.8 and older in AbstractAnsibleInvocation.java, AnsibleAdHocCommandBuilder.java, AnsibleAdHocCommandInvocationTest.java, AnsibleContext.java, AnsibleJobDslExtension.java, AnsiblePlaybookBuilder.java, AnsiblePlaybookStep.java that disables host key verification by default.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://jenkins.io/security/advisory/2018-03-26/#SECURITY-630

Exploit#

No public exploit known

History#

Version 12018-04-05Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.