Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-2598
HistoryMay 23, 2018 - 1:29 p.m.

Design/Logic Flaw

2018-05-2313:29:00
PRIOn knowledge base
www.prio-n.com
7

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.4%

Jenkins before versions 2.44, 2.32.2 uses AES ECB block cipher mode without IV for encrypting secrets which makes Jenkins and the stored secrets vulnerable to unnecessary risks (SECURITY-304).

CPENameOperatorVersion
jenkinslt2.44
jenkinslt2.32.2

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.4%