Lucene search

K
osvGoogleOSV:GHSA-JXG7-CGHF-MGGX
HistoryMay 24, 2022 - 4:52 p.m.

Jenkins VMware Lab Manager Slaves Plugin vulnerable to Improper Certificate Validation

2022-05-2416:52:46
Google
osv.dev
7
jenkins
vmware
lab manager
ssl/tls
certificate validation
jvm
software

EPSS

0.002

Percentile

55.1%

VMware Lab Manager Slaves Plugin unconditionally disables SSL/TLS certificate validation for the entire Jenkins controller JVM.

As of publication of this advisory, there is no fix.

EPSS

0.002

Percentile

55.1%

Related for OSV:GHSA-JXG7-CGHF-MGGX