Lucene search
+L

4 matches found

OSV
OSV
•added 2024/03/06 6:30 p.m.•71 views

GHSA-XJ36-6XC6-8P9X Jenkins Delphix Plugin has SSL/TLS certificate validation disabled by default

In Jenkins Delphix Plugin 3.0.1, a global option for administrators to enable or disable SSL/TLS certificate validation for Data Control Tower DCT connections is disabled by default...

4.8CVSS5.5AI score0.00417EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2024/03/06 6:30 p.m.•57 views

Jenkins Delphix Plugin has SSL/TLS certificate validation disabled by default

In Jenkins Delphix Plugin 3.0.1, a global option for administrators to enable or disable SSL/TLS certificate validation for Data Control Tower DCT connections is disabled by default...

5.3CVSS6.8AI score0.00417EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2024/03/06 5:02 p.m.•112 views

CVE-2024-28161

The Jenkins Delphix Plugin 3.0.1 contains a configuration weakness where a global option for administrators to enable or disable SSL/TLS certificate validation for Data Control Tower (DCT) connections is disabled by default . This behavior corresponds to CWE-295 (Improper Certificate Validation)....

5.3CVSS6.5AI score0.00417EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/06 12:00 a.m.•3 views

CVE-2024-28161: Improper Certificate Validation

In Jenkins Delphix Plugin 3.0.1, a global option for administrators to enable or disable SSL/TLS certificate validation for Data Control Tower DCT connections is disabled by default...

5.3CVSS5.8AI score0.00417EPSS
SaveExploits0References2
Rows per page
Query Builder