Skip to content
OpenAdvisories
Medium · 6.5 CVE-2019-10314 EUVD-2022-2232GHSA-3qf7-9xhj-qcfj

Jenkins Koji Plugin globally and unconditionally disables SSL/TLS certificate validation

Published Apr 30, 2019 · Updated Aug 4, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Koji Plugin Package: org.jenkins-ci.plugins:koji Category: Web / CMS Ecosystem: Maven

Description

Jenkins Koji Plugin disables SSL/TLS and hostname verification globally for the Jenkins master JVM.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Koji Plugin 0.3 and earlier —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:koji <= 0.3 — GHSA-3qf7-9xhj-qcfj

References