Lucene search
GoogleOSV:GHSA-VQ7P-F4FV-RR5XHistoryMay 14, 2022 - 3:23 a.m.
Jenkins vSphere Plugin disables SSL/TLS certificate validation by default
2022-05-1403:23:45
Google
osv.dev
8
jenkins
vsphere plugin
ssl/tls
EPSS
0.001
Percentile
32.4%
A man in the middle vulnerability exists in Jenkins vSphere Plugin 2.16 and older in VSphere.java that disables SSL/TLS certificate validation by default. vSphere Plugin 2.17 now has SSL/TLS certificate validation enabled by default.
Related
osv
osv
CVE-2018-1000151
2018-04-05 13:29:00
prion
prion
Input validation
2018-04-05 13:29:00
cve
cve
CVE-2018-1000151
2018-04-05 13:29:00
github
github
Jenkins vSphere Plugin disables SSL/TLS certificate validation by default
2022-05-14 03:23:45
nvd
nvd
CVE-2018-1000151
2018-04-05 13:29:00
cvelist
cvelist
CVE-2018-1000151
2018-04-05 13:00:00