CVE-2018-1000149

CVE-2018-1000149 is a medium-severity man-in-the-middle vulnerability affecting Jenkins Ansible Plugin versions 0.8 and older. The flaw, present in multiple Java files, disables host key verification by default, allowing an attacker to intercept and potentially alter communications. With a CVSS score of 5.6, this vulnerability has a network attack vector and high attack complexity, potentially leading to limited impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.