CVE-2017-2598

2018-05-2313:29:00

Google

osv.dev

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.4%

JSON

Jenkins before versions 2.44, 2.32.2 uses AES ECB block cipher mode without IV for encrypting secrets which makes Jenkins and the stored secrets vulnerable to unnecessary risks (SECURITY-304).

CPENameOperatorVersion
jenkinseqbuilds/154
jenkinseqchanges/215
jenkinseqchanges/273
jenkinseqbuilds/17
jenkinseqbuilds/11
jenkinseqjenkins-1.509
jenkinseqbuilds/164
jenkinseqjenkins-1.550
jenkinseqbuilds/176
jenkinseqbuilds/311

Name	Operator	Version
jenkins	eq	builds/154
jenkins	eq	changes/215
jenkins	eq	changes/273
jenkins	eq	builds/17
jenkins	eq	builds/11
jenkins	eq	jenkins-1.509
jenkins	eq	builds/164
jenkins	eq	jenkins-1.550
jenkins	eq	builds/176
jenkins	eq	builds/311