Security Advisory
CVE-2017-2598
4.3
MEDIUM
Vulnerability Description
Jenkins before versions 2.44, 2.32.2 uses AES ECB block cipher mode without IV for encrypting secrets which makes Jenkins and the stored secrets vulnerable to unnecessary risks (SECURITY-304).
Published Date
May 23, 2018
Official Source
NIST NVD Advisory