Description
Jenkins before versions 2.44, 2.32.2 uses AES ECB block cipher mode without IV for encrypting secrets which makes Jenkins and the stored secrets vulnerable to unnecessary risks (SECURITY-304).
Remediation
References
Related Vulnerabilities
WordPress Plugin Event Calendar WD-Responsive Event Calendar Cross-Site Scripting (1.1.42)
WordPress Plugin Light Post 'abspath' Parameter Remote File Include (1.4)
WebLogic CVE-2019-2568 Vulnerability (CVE-2019-2568)
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2020-14384)
Oracle Database Server CVE-2015-2585 Vulnerability (CVE-2015-2585)