22 matches found
codefresh globally and unconditionally disables SSL/TLS certificate validation
codefresh unconditionally disables SSL/TLS certificate validation for the entire Jenkins controller JVM. As of publication of this advisory, there is no fix...
7.5CVSS6.8AI score0.01117EPSS
SaveExploits0Affected Software1
CVE-2019-10381: Improper Certificate Validation
Jenkins Codefresh Integration Plugin 1.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM...
7.5CVSS5.8AI score0.01117EPSS
SaveExploits0References2
20