Skip to content
OpenAdvisories
High · 8.2 CVE-2019-16558 EUVD-2022-2000GHSA-2j5w-cwc3-8hxw

Improper Certificate Validation in Jenkins Spira Importer Plugin

Published Dec 17, 2019 · Updated Aug 5, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Spira Importer Plugin Package: com.inflectra.spiratest.plugins:inflectra-spira-integration Category: Web / CMS Ecosystem: Maven

Description

Jenkins Spira Importer Plugin 3.2.3 and earlier disables SSL/TLS certificate validation for the Jenkins master JVM.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Spira Importer Plugin unspecified – ≤ 3.2.3 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven com.inflectra.spiratest.plugins:inflectra-spira-integration < 3.2.4 3.2.4 GHSA-2j5w-cwc3-8hxw

References