Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-28161 EUVD-2024-1044GHSA-xj36-6xc6-8p9x

Jenkins Delphix Plugin has SSL/TLS certificate validation disabled by default

Published Mar 6, 2024 · Updated Feb 13, 2025 · Assigned by jenkins

Description

In Jenkins Delphix Plugin 3.0.1, a global option for administrators to enable or disable SSL/TLS certificate validation for Data Control Tower (DCT) connections is disabled by default.

Affected products

VendorProductAffectedFixed
Jenkins Project Jenkins Delphix Plugin 3.0.1 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:delphix >= 3.0.1, < 3.0.2 3.0.2 GHSA-xj36-6xc6-8p9x

Advisories 1

References