← Back to CVE List
CVE-2023-37948
Jenkins Oracle Cloud Infrastructure Compute Plugin 1.0.16 and earlier does not validate SSH host keys when connecting OCI clouds, enabling man-in-the-middle attacks.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt