Skip to content
OpenAdvisories
Medium · 6.5 CVE-2019-10382 GHSA-jxg7-cghf-mggx

Jenkins VMware Lab Manager Slaves Plugin vulnerable to Improper Certificate Validation

Published Aug 7, 2019 · Updated Aug 4, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins VMware Lab Manager Slaves Plugin Package: org.jenkins-ci.plugins:labmanager Category: Web / CMS Ecosystem: Maven

Description

Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:labmanager <= 0.2.8 — GHSA-jxg7-cghf-mggx

References