Skip to content
OpenAdvisories
High · 8.1 CVE-2023-35142 EUVD-2023-1880GHSA-rr3p-5fcf-v5m3

SSL/TLS certificate validation disabled by default in Jenkins Checkmarx Plugin

Published Jun 14, 2023 · Updated Jan 2, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Checkmarx Plugin Package: com.checkmarx.jenkins:checkmarx Category: Web / CMS Ecosystem: Maven

Description

Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default.

Affected products

VendorProductAffectedFixed
Jenkins Project Jenkins Checkmarx Plugin ≤ 2022.4.3 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven com.checkmarx.jenkins:checkmarx < 2023.2.6 2023.2.6 GHSA-rr3p-5fcf-v5m3

Advisories 1

References