Lucene search

K
osvGoogleOSV:GHSA-46RR-87H4-F5Q6
HistoryMay 24, 2022 - 5:03 p.m.

SSL/TLS certificate validation globally and unconditionally disabled by Jenkins WebSphere Deployer Plugin

2022-05-2417:03:47
Google
osv.dev
5
ssl/tls
certificate validation
jenkins
websphere deployer plugin

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

28.4%

Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows users with Overall/Read access to disable SSL/TLS certificate and hostname validation for the entire Jenkins master JVM.

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

28.4%

Related for OSV:GHSA-46RR-87H4-F5Q6