CVE-2019-10446

2019-10-1614:15:12

Google

osv.dev

7.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.8%

JSON

Jenkins Cadence vManager Plugin 2.7.0 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM.

CPENameOperatorVersion
vmanager-plugineqmanager-plugin-1.6
vmanager-plugineqmanager-plugin-1.4
vmanager-plugineqmanager-plugin-2.4.8
vmanager-plugineqmanager-plugin-2.3
vmanager-plugineqmanager-plugin-2.0
vmanager-plugineqmanager-plugin-2.5.3
vmanager-plugineqmanager-plugin-2.5.0
vmanager-plugineqmanager-plugin-1.7
vmanager-plugineqmanager-plugin-2.4.5
vmanager-plugineqmanager-plugin-1.9

Name	Operator	Version
vmanager-plugin	eq	manager-plugin-1.6
vmanager-plugin	eq	manager-plugin-1.4
vmanager-plugin	eq	manager-plugin-2.4.8
vmanager-plugin	eq	manager-plugin-2.3
vmanager-plugin	eq	manager-plugin-2.0
vmanager-plugin	eq	manager-plugin-2.5.3
vmanager-plugin	eq	manager-plugin-2.5.0
vmanager-plugin	eq	manager-plugin-1.7
vmanager-plugin	eq	manager-plugin-2.4.5
vmanager-plugin	eq	manager-plugin-1.9