Jenkins Plugin Checkmarx 信任管理问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. Jenkins Plugin Checkmarx ...

PT-2023-3634 · Jenkins · Jenkins Checkmarx Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Checkmarx Plugin versions 2022.4.3 and earlier Description: The issue is related to errors in SSL/TLS certificate validation. It may allow a remote attacker to perform a "man-in-the-middle" attack. The plugin disables SSL/TLS validati...

CVE-2023-35142: Improper Certificate Validation

Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default...

SSL/TLS certificate validation disabled by default in checkmarx

checkmarx allows to globally enable or disable SSL/TLS validation for connections to the Checkmarx server. checkmarx 2022.4.3 and earlier disables it by default. Unless changed by an administrator, it would cause all connections to the Checkmarx server to ignore SSL/TLS validation, thereby enabli...

MAL-2023-2692 Malicious code in cxfreezepy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 98b9fe0f574ed33e0a4096ba8774936c73969493c1621244334a739ef4f94f5d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in xml2binary (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8d6e59c6cb9fb2059b390b3b3677b1be1d9eedbe9f78b8ffa2794d5483e2d6d4 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-2474 Malicious code in discord-spammer-webhooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 992e658db3addbbf4402e9f8bfb5c3a8af81b96c87e70863df390190f52de66b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6525 Malicious code in selfpyintpaypal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 13bec999a49bf9dee37e242115164d05756af19ea57d26d0b54b4c67c1f01571 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5233 Malicious code in py-intellibint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c51243b24c705c8e86f895cf56a4aaf31db49b64674882dbef77513f1bc075dc EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libguigrandmc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6aecdbe6b089ffe59ba97add73503b78ab4c6dc432a5b733ed03687c146effbf EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-mcultracraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 05f872d3d839e83f4cfa6a29e16e93759396a58f0bb74d8f93ec8f14420b0a40 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqgetlibpyw (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 67186a3694ab2d755a3b406239cd713d96ade3d92d6d45ec1e9d41506af1f3bf EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqtoolinfoultra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0b8b6487fc957c84302c55c746ea6ba8fc405cbb64a6a20e5e6dab52614b3f2b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4270 Malicious code in libosintliblgtb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6190ac1bf931e799a1ad07e94c4f41da0a77a0b541c92aa259a5cd7b82b0a6b0 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqcvvermask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ff37efac8ff00c6c0fcd45c76f69f5baf4d79c1a6d2beef9826e2569e30c4073 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5030 Malicious code in py-controlguipost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 480e1dc18ed2f651bc3cd4dfddefc30c94cf887485d83b3d88432c7a9384cb42 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3457 Malicious code in esqstudyrepull (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 009e3afe0678f4ddccc2f22c8f54172f2d18e1223738609678eb4743ef44ca1d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5722 Malicious code in py-urlhttphttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6e1a76dead03b03b5b1a66c3ac3c2845b95ccf2e6762f24639b562bc76e8e7a7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5395 Malicious code in py-paypalinfopip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d00980074e219dc11140953e97dbbf1b8f13c4d6efc450d19cfccfd12c8848b2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfsupergameencode (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx af6f2b9e4bedd9764c7ad96b9866e69e2e2592a7a123c456c10fa58eaad0774f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...