CVE-2023-37948
Jenkins Oracle Cloud Infrastructure Compute Plugin 1.0.16 and earlier does not validate SSH host keys when connecting OCI clouds, enabling man-in-the-middle attacks.
CVSS 3.1 · 3.7 Low
EPSS < 1%
KEV · Not listed
Vendors
Products