CVE-2019-10444

2019-10-1614:15:12

Google

osv.dev

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.0%

JSON

Jenkins Bumblebee HP ALM Plugin 4.1.3 and earlier unconditionally disabled SSL/TLS and hostname verification for connections to HP ALM.

CPENameOperatorVersion
bumblebee-plugineqbumblebee-4.0.8
bumblebee-plugineqbumblebee-4.0.6
bumblebee-plugineqbumblebee-4.0.9
bumblebee-plugineqbumblebee-3.0.3
bumblebee-plugineqbumblebee-4.0.0
bumblebee-plugineqbumblebee-4.1.0
bumblebee-plugineqbumblebee-4.1.1
bumblebee-plugineqbumblebee-4.1.2
bumblebee-plugineqbumblebee-3.0.2
bumblebee-plugineqbumblebee-4.0.1

Name	Operator	Version
bumblebee-plugin	eq	bumblebee-4.0.8
bumblebee-plugin	eq	bumblebee-4.0.6
bumblebee-plugin	eq	bumblebee-4.0.9
bumblebee-plugin	eq	bumblebee-3.0.3
bumblebee-plugin	eq	bumblebee-4.0.0
bumblebee-plugin	eq	bumblebee-4.1.0
bumblebee-plugin	eq	bumblebee-4.1.1
bumblebee-plugin	eq	bumblebee-4.1.2
bumblebee-plugin	eq	bumblebee-3.0.2
bumblebee-plugin	eq	bumblebee-4.0.1