description: Jenkins Google Compute Engine Plugin 4.1.1 and earlier does not verify SSH host keys when connecting agents created by the plugin, enabling man-in-the-middle attacks.
affected:
{
product: Jenkins Google Compute Engine Plugin
vendor: Jenkins project
versions:
status: affected, version: 4.1.1 and earlier
}