CVE-2023-30517

🗓️ 12 Apr 2023 17:05:08Reported by jenkinsType

Jenkins NeuVector SSL/TLS vulnerability

Reporter	Title	Published	Views	Family All 15
BDU FSTEC	The vulnerability of the Jenkins NeuVector Vulnerability Scanner Plugin, related to improper verification of SSL/TLS certificates, allows a perpetrator to gain unauthorized access to protected information.	2 May 202300:00	–	bdu_fstec
Circl	CVE-2023-30517	12 Apr 202322:24	–	circl
Tenable Nessus	Jenkins Enterprise and Operations Center 2.346.x < 2.346.40.0.15 Multiple Vulnerabilities (CloudBees Security Advisory 2023-04-12)	13 Apr 202300:00	–	nessus
CNNVD	Jenkins Plugin NeuVector Vulnerability Scanner 信任管理问题漏洞	12 Apr 202300:00	–	cnnvd
CVE	CVE-2023-30517	12 Apr 202317:05	–	cve
EUVD	EUVD-2023-1385	3 Oct 202520:07	–	euvd
Github Security Blog	Jenkins NeuVector Vulnerability Scanner Plugin disables SSL/TLS certificate and hostname validation	12 Apr 202318:30	–	github
NVD	CVE-2023-30517	12 Apr 202318:15	–	nvd
OSV	CVE-2023-30517	12 Apr 202318:15	–	osv
OSV	GHSA-R3MM-V4X7-2PHM Jenkins NeuVector Vulnerability Scanner Plugin disables SSL/TLS certificate and hostname validation	12 Apr 202318:30	–	osv

[
  {
    "defaultStatus": "unknown",
    "product": "Jenkins NeuVector Vulnerability Scanner Plugin",
    "vendor": "Jenkins Project",
    "versions": [
      {
        "lessThanOrEqual": "1.22",
        "status": "affected",
        "version": "0",
        "versionType": "maven"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2023/04/13/3
jenkins	www.jenkins.io/security/advisory/2023-04-12/

24 Oct 2023 12:49Current

5.4Medium risk

Vulners AI Score5.4

EPSS0.00322