Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:GHSA-23C2-W636-5RHM
HistoryMay 24, 2022 - 4:44 p.m.

Jenkins SiteMonitor Plugin globally and unconditionally disables SSL/TLS certificate validation

2022-05-2416:44:55
Google
osv.dev
7
jenkins
sitemonitor
ssl/tls

AI Score

6.7

Confidence

High

EPSS

0.003

Percentile

70.5%

JSON

Jenkins SiteMonitor Plugin unconditionally disables SSL/TLS certificate validation for the entire Jenkins controller JVM.

SiteMonitor Plugin no longer does that. Instead, it now has an opt-in option to ignore SSL/TLS errors for each site check individually.

Related

prion 1
github 1
nvd 1
osv 1
cvelist 1
cve 1
prion
prion
Code injection
2019-04-30 13:29:00
github
github
Jenkins SiteMonitor Plugin globally and unconditionally disables SSL/TLS certificate validation
2022-05-24 16:44:55
nvd
nvd
CVE-2019-10317
2019-04-30 13:29:05
osv
osv
CVE-2019-10317
2019-04-30 13:29:05
cvelist
cvelist
CVE-2019-10317
2019-04-30 12:25:18
cve
cve
CVE-2019-10317
2019-04-30 13:29:05

AI Score

6.7

Confidence

High

EPSS

0.003

Percentile

70.5%

JSON
Related for OSV:GHSA-23C2-W636-5RHM
prion1github1nvd1osv1cvelist1cve1