description: Jenkins Git client Plugin 3.11.0 and earlier does not perform SSH host key verification when connecting to Git repositories via SSH, enabling man-in-the-middle attacks.
affected:
{
product: Jenkins Git client Plugin
vendor: Jenkins project
versions:
lessThanOrEqual: 3.11.0, status: affected, version: unspecified, versionType: custom
status: unaffected, version: 3.10.0.1
}