Jenkins Cadence vManager Plugin disables SSL/TLS and hostname verification

2022-05-2416:58:49

Google

osv.dev

0.002 Low

EPSS

Percentile

53.8%

JSON

Jenkins Cadence vManager Plugin prior to version 2.7.1 disables SSL/TLS and hostname verification globally for the Jenkins master JVM. This issue is patched in 2.7.1

CPENameOperatorVersion
org.jenkins-ci.plugins:vmanager-plugineq2.5.8
org.jenkins-ci.plugins:vmanager-plugineq2.5.5
org.jenkins-ci.plugins:vmanager-plugineq1.3
org.jenkins-ci.plugins:vmanager-plugineq2.6.0
org.jenkins-ci.plugins:vmanager-plugineq2.4
org.jenkins-ci.plugins:vmanager-plugineq2.4.6
org.jenkins-ci.plugins:vmanager-plugineq2.4.1
org.jenkins-ci.plugins:vmanager-plugineq1.7
org.jenkins-ci.plugins:vmanager-plugineq2.4.5
org.jenkins-ci.plugins:vmanager-plugineq2.3

Name	Operator	Version
org.jenkins-ci.plugins:vmanager-plugin	eq	2.5.8
org.jenkins-ci.plugins:vmanager-plugin	eq	2.5.5
org.jenkins-ci.plugins:vmanager-plugin	eq	1.3
org.jenkins-ci.plugins:vmanager-plugin	eq	2.6.0
org.jenkins-ci.plugins:vmanager-plugin	eq	2.4
org.jenkins-ci.plugins:vmanager-plugin	eq	2.4.6
org.jenkins-ci.plugins:vmanager-plugin	eq	2.4.1
org.jenkins-ci.plugins:vmanager-plugin	eq	1.7
org.jenkins-ci.plugins:vmanager-plugin	eq	2.4.5
org.jenkins-ci.plugins:vmanager-plugin	eq	2.3