Lucene search
+L

4 matches found

OSV
OSV
•added 2024/03/06 6:30 p.m.•69 views

GHSA-XJ36-6XC6-8P9X Jenkins Delphix Plugin has SSL/TLS certificate validation disabled by default

In Jenkins Delphix Plugin 3.0.1, a global option for administrators to enable or disable SSL/TLS certificate validation for Data Control Tower DCT connections is disabled by default...

4.8CVSS5.5AI score0.00417EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2024/03/06 6:30 p.m.•51 views

Jenkins Delphix Plugin has SSL/TLS certificate validation disabled by default

In Jenkins Delphix Plugin 3.0.1, a global option for administrators to enable or disable SSL/TLS certificate validation for Data Control Tower DCT connections is disabled by default...

6.8AI score0.00417EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2024/03/06 5:02 p.m.•107 views

CVE-2024-28161

The Jenkins Delphix Plugin version 3.0.1 contains a security vulnerability where the global option to enable or disable SSL/TLS certificate validation for Data Control Tower (DCT) connections is disabled by default . This configuration allows for potentially insecure connections. In version 3.0.2...

6.5AI score0.00417EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/06 12:00 a.m.•1 views

CVE-2024-28161: Improper Certificate Validation

In Jenkins Delphix Plugin 3.0.1, a global option for administrators to enable or disable SSL/TLS certificate validation for Data Control Tower DCT connections is disabled by default...

5.3CVSS5.8AI score0.00417EPSS
SaveExploits0References2
Rows per page
Query Builder