4 matches found
CVE-2019-10444
Jenkins Bumblebee HP ALM Plugin 4.1.3 and earlier unconditionally disabled SSL/TLS and hostname verification for connections to HP ALM...
6.5CVSS7AI score
SaveExploits0References1
CVE-2019-10444
Jenkins Bumblebee HP ALM Plugin 4.1.3 and earlier unconditionally disabled SSL/TLS and hostname verification for connections to HP ALM...
6.4AI score0.00799EPSS
SaveExploits0References1
CVE-2019-10444
The CVE-2019-10444 entry concerns Jenkins Bumblebee HP ALM Plugin (version 4.1.3 and earlier) that unconditionally disabled SSL/TLS and hostname/certificate validation when connecting to HP ALM. This creates a risk of man‑in‑the‑middle if connections are not properly trusted. Public details confi...
6.5CVSS6.4AI score0.00799EPSS
SaveExploits0References1Affected Software1
20