CVE-2017-1000402

CVE-2017-1000402 affects Jenkins Swarm Plugin Client versions 3.4 and earlier, stemming from an outdated commons-httpclient library that failed to properly validate SSL certificates. This flaw enables man-in-the-middle attacks, allowing an attacker to intercept and potentially manipulate communications. With a CVSS score of 5.9 (MEDIUM), this vulnerability has a network attack vector and high integrity impact, but requires high attack complexity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.