1234 matches found
CVE-2016-10931
An issue was discovered in the openssl crate before 0.9.0 for Rust. There is an SSL/TLS man-in-the-middle vulnerability because certificate verification is off by default and there is no API for hostname verification...
CVE-2016-10931
CVE-2016-10931 pertains to the openssl crate for Rust prior to 0.9.0. The issue is a TLS/SSL MITM vulnerability caused by certificate verification being off by default and the absence of an API for hostname verification, enabling an attacker to interfere with connections. The available documents ...
CVE-2019-10382
Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM...
CVE-2019-10381
Jenkins Codefresh Integration Plugin 1.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM...
Design/Logic Flaw
Jenkins Codefresh Integration Plugin 1.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM...
Design/Logic Flaw
Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM...
CVE-2019-10382
Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM...
CVE-2019-10381
Jenkins Codefresh Integration Plugin 1.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM...
CVE-2019-10382
CVE-2019-10382 affects Jenkins VMware Lab Manager Slaves Plugin versions 0.2.8 and earlier. The vulnerability stems from the plugin disabling SSL/TLS and hostname verification globally for the Jenkins master JVM, creating a trust and MITM risk for TLS connections. Documented impacts indicate pote...
PT-2019-6387 · Jenkins · Jenkins Vmware Lab Manager Slaves Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins VMware Lab Manager Slaves Plugin versions 0.2.8 and earlier Description: The issue is related to the disabling of global SSL/TLS and hostname verification for the Jenkins master JVM, which could allow a remote attacker to perform a...
CVE-2017-18407
cPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement download SEC-279...
Design/Logic Flaw
cPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement download SEC-279...
CVE-2017-18407
CVE-2017-18407 affects cPanel before 67.9999.103, where SSL hostname verification is not enforced for the support‑agreement download (SEC-279). This is the concrete vulnerability described across multiple connected records. The available documents do not provide exploit details, impact specifics ...
CVE-2017-18407
cPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement download SEC-279...
CVE-2019-10334
Jenkins ElectricFlow Plugin 1.1.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM when MultipartUtility.java is used to upload files...
PT-2019-11734 · Cloudbees +1 · Cloudbees Cd Plugin +2
Name of the Vulnerable Software and Affected Versions: Jenkins ElectricFlow Plugin version 1.1.5 and earlier CloudBees CD Plugin affected versions not specified Description: The issue concerns the disabling of SSL/TLS and hostname verification in Jenkins plugins. Specifically, the Jenkins...
CVE-2019-10314
Jenkins Koji Plugin disables SSL/TLS and hostname verification globally for the Jenkins master JVM...
CVE-2019-10314
Jenkins Koji Plugin disables SSL/TLS and hostname verification globally for the Jenkins master JVM...