Lucene search

K
osvGoogleOSV:GHSA-3QF7-9XHJ-QCFJ
HistoryMay 24, 2022 - 4:44 p.m.

Jenkins Koji Plugin globally and unconditionally disables SSL/TLS certificate validation

2022-05-2416:44:55
Google
osv.dev
3
jenkins
koji plugin
ssl/tls
certificate validation
jvm
software

AI Score

6.8

Confidence

High

EPSS

0.003

Percentile

70.5%

Jenkins Koji Plugin unconditionally disables SSL/TLS certificate validation for the entire Jenkins controller JVM.

As of publication of this advisory, there is no fix.

AI Score

6.8

Confidence

High

EPSS

0.003

Percentile

70.5%

Related for OSV:GHSA-3QF7-9XHJ-QCFJ