CVE-2017-2598

CVE-2017-2598 describes a vulnerability in Jenkins versions prior to 2.44 and 2.32.2, where secrets were encrypted using AES ECB block cipher mode without an Initialization Vector (IV), making them susceptible to cryptographic attacks. This medium-severity vulnerability (CVSS 4.3) allows an authenticated attacker to potentially compromise the confidentiality of stored secrets with low attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.