Lucene search

K
osvGoogleOSV:GHSA-PFH3-J79R-VQRJ
HistoryMar 06, 2024 - 6:30 p.m.

Jenkins Delphix Plugin has improper SSL/TLS certificate validation

2024-03-0618:30:39
Google
osv.dev
6
jenkins
delphix
plugin
ssl
tls
certificate
validation
data control tower
dct
connection
software
administrators
global option
improper
3.0.1
3.1.0
restart

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

In Jenkins Delphix Plugin 3.0.1 through 3.1.0 (both inclusive) a global option for administrators to enable or disable SSL/TLS certificate validation for Data Control Tower (DCT) connections fails to take effect until Jenkins is restarted when switching from disabled validation to enabled validation.

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for OSV:GHSA-PFH3-J79R-VQRJ