Lucene search
HistoryApr 12, 2023 - 6:15 p.m.
CVE-2023-30517
jenkins
neuvector
ssl/tls
vulnerability
scanner
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
25.7%
Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier unconditionally disables SSL/TLS certificate and hostname validation when connecting to a configured NeuVector Vulnerability Scanner server.
Affected configurations
Node
jenkinsneuvector_vulnerability_scannerRange≤1.22jenkins
| Vendor | Product | Version | CPE |
|---|---|---|---|
| jenkins | neuvector_vulnerability_scanner | * | cpe:2.3:a:jenkins:neuvector_vulnerability_scanner:*:*:*:*:*:jenkins:*:* |
Related
github
github
cvelist
cvelist
CVE-2023-30517
2023-04-12 17:05:08
osv
osv
prion
prion
Input validation
2023-04-12 18:15:00
cve
cve
CVE-2023-30517
2023-04-12 18:15:09
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
25.7%
Related for NVD:CVE-2023-30517