Medium · 4.8 CVE-2019-10444 EUVD-2022-4971GHSA-qgp8-h5cp-r75r

Jenkins Bumblebee HP ALM Plugin unconditionally disabled SSL/TLS certificate validation

Published Oct 16, 2019 · Updated Aug 4, 2024 · Assigned by jenkins

Description

Jenkins Bumblebee HP ALM Plugin 4.1.3 and earlier unconditionally disabled SSL/TLS and hostname verification for connections to HP ALM.

Vendor	Product	Affected	Fixed
Jenkins project	Jenkins Bumblebee HP ALM Plugin	4.1.3 and earlier	—

Ecosystem	Package	Affected	Fixed	Record
Maven	org.jenkins-ci.plugins:bumblebee	< 4.1.4	4.1.4	GHSA-qgp8-h5cp-r75r