https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 15:31:20 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-33755 cnvd-2020-33755 https://cve.radiocsirt.org/vuln/cnvd-2020-33755 https://cve.radiocsirt.org/vuln/euvd-2026-35842 EUVD-2026-35842 https://cve.radiocsirt.org/vuln/euvd-2026-35842 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2187 <p>Jenkins Amazon EC2 Plugin 1.50.1 and earlier unconditionally accepts self-signed certificates and does not perform hostname validation, enabling man-in-the-middle attacks.</p> <p>Jenkins Amazon EC2 Plugin 1.50.1 and earlier unconditionally accepts self-signed certificates and does not perform hostname validation, enabling man-in-the-middle attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-2187 https://cve.radiocsirt.org/vuln/ghsa-c89c-pvm7-33wj <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:ec2</p> <p>Amazon EC2 Plugin connects to Windows agents via HTTPS.</p> <p>Amazon EC2 Plugin 1.50.1 and earlier unconditionally accepts self-signed HTTPS certificates and does not perform hostname validation when connecting to Windows agents. This lack of validation could be abused using a man-in-the-middle attack to intercept these connections to build agents.</p> <p>Amazon EC2 Plugin 1.50.2 by default no longer accepts self-signed HTTPS certificates and performs hostname validation. A new configuration option allows restoring the previous, unsafe behavior. For more information see [the plugin documentation](https://github.com/jenkinsci/ec2-plugin/#securing-the-connection-to-windows-amis).</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:ec2</p> <p>Amazon EC2 Plugin connects to Windows agents via HTTPS.</p> <p>Amazon EC2 Plugin 1.50.1 and earlier unconditionally accepts self-signed HTTPS certificates and does not perform hostname validation when connecting to Windows agents. This lack of validation could be abused using a man-in-the-middle attack to intercept these connections to build agents.</p> <p>Amazon EC2 Plugin 1.50.2 by default no longer accepts self-signed HTTPS certificates and performs hostname validation. A new configuration option allows restoring the previous, unsafe behavior. For more information see [the plugin documentation](https://github.com/jenkinsci/ec2-plugin/#securing-the-connection-to-windows-amis).</p> https://cve.radiocsirt.org/vuln/ghsa-c89c-pvm7-33wj https://cve.radiocsirt.org/vuln/gsd-2020-2187 gsd-2020-2187 https://cve.radiocsirt.org/vuln/gsd-2020-2187