Search vulnerabilities

Results 1

Export CSV
CVE-2017-1000402

jenkins-pugin-swarm: Swarm Plugin Client bundled vulnerable version of the commons-httpclient library (SECURITY-597)

Jenkins Swarm Plugin Client 3.4 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks.

CVSS 3.0 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Products