← Vulnerability feed

Vulnerability record · CVE-2022-36881 · published 27 July 2022

CVE-2022-36881: Jenkins git client improper certificate validation vulnerability

Jenkins · Git Client

Jenkins Git client Plugin 3.11.0 and earlier does not perform SSH host key verification when connecting to Git repositories via SSH, enabling man-in-the-middle attacks.

8.1 CVSS 3.1 High EPSS 0.97% · top 39.5% CWE-295 · Improper certificate validation
8.1CVSS 3.1 base score
0.97%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

Jenkins Git client Plugin 3.11.0 and earlier does not perform SSH host key verification when connecting to Git repositories via SSH, enabling man-in-the-middle attacks.

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.openwall.com/lists/oss-security/2022/07/27/1 Mailing ListThird Party Advisory
https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-1468 Vendor Advisory
http://www.openwall.com/lists/oss-security/2022/07/27/1 Mailing ListThird Party Advisory
https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-1468 Vendor Advisory

Track CVE-2022-36881 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2019-10392Jenkins git client os command injection vulnerabilityJenkins Git Client Plugin 2.8.4 and earlier and 3.0.0-rc did not properly restrict values passed as URL argument to an invocation of 'git ls-remote',…EPSS 26%5.0CVE-2026-57282Jenkins git client os command injection vulnerabilityJenkins Git client Plugin 6.6.0 and earlier does not correctly escape the workspace directory name when it is embedded into a generated SSH wrapper s…EPSS 0.25%5.0CVE-2025-67640Jenkins git client os command injection vulnerabilityJenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of an argument in a temporary s…EPSS 0.21%4.3CVE-2025-58458Jenkins git client information exposure vulnerabilityIn Jenkins Git client Plugin 6.3.2 and earlier, except 6.1.4 and 6.2.1, Git URL field form validation responses differ based on whether the specified…EPSS 0.32%3.3CVE-2017-1000242Jenkins git client information exposure vulnerabilityJenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosureEPSS 0.38%9.8CVE-2026-85102Checkpoint gaia embedded improper certificate validation vulnerabilityImproper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to …KEVEPSS 0.99%5.5CVE-2023-41991Apple iOS, iPadOS and macOS certificate validation bypassApple iOS, iPadOS and macOS contain an improper certificate validation flaw (CWE-295) that lets a malicious app bypass signature validation. Apple st…KEVEPSS 13%analysed7.8CVE-2023-20963Android WorkSource parcel mismatch local privilege escalationCVE-2023-20963 is a parcel mismatch in Android's WorkSource component that allows a local attacker to escalate privileges without additional executio…KEVEPSS 1.5%analysed

Source: NIST National Vulnerability Database (record CVE-2022-36881), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.