Beveiligingsadvies
CVE-2017-2598
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
Jenkins before versions 2.44, 2.32.2 uses AES ECB block cipher mode without IV for encrypting secrets which makes Jenkins and the stored secrets vulnerable to unnecessary risks (SECURITY-304).