Skip to content
OpenAdvisories
Medium · 6.5 CVE-2019-10381 EUVD-2022-3118GHSA-862j-cv9p-6hpf

Jenkins Codefresh Integration Plugin Improper Certificate Validation vulnerability

Published Aug 7, 2019 · Updated Aug 4, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Codefresh Integration Plugin Package: org.jenkins-ci.plugins:codefresh Category: Web / CMS Ecosystem: Maven

Description

Jenkins Codefresh Integration Plugin 1.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Codefresh Integration Plugin 1.8 and earlier —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:codefresh <= 1.8 — GHSA-862j-cv9p-6hpf

References