Skip to content
OpenAdvisories
Medium · 6.5 CVE-2019-10317 EUVD-2022-1889GHSA-23c2-w636-5rhm

Jenkins SiteMonitor Plugin globally and unconditionally disables SSL/TLS certificate validation

Published Apr 30, 2019 · Updated Aug 4, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins SiteMonitor Plugin Package: org.jvnet.hudson.plugins:sitemonitor Category: Web / CMS Ecosystem: Maven

Description

Jenkins SiteMonitor Plugin 0.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins SiteMonitor Plugin 0.5 and earlier —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jvnet.hudson.plugins:sitemonitor < 0.6 0.6 GHSA-23c2-w636-5rhm

References