CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.6. It affects Jenkins.
CVE
CVE-2020-2185
Severity
MEDIUM
CVSS
5.6
EPSS
0.69%
Jenkins
Original NVD Description
Jenkins Amazon EC2 Plugin 1.50.1 and earlier does not validate SSH host keys when connecting agents, enabling man-in-the-middle attacks.
Related CVEs
Other vulnerabilities affecting the same vendor(s)