Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2022/05/24 4:47 p.m.24 views

Jenkins ElectricFlow Plugin globally and unconditionally disabled SSL/TLS certificate validation

CloudBees CD Plugin unconditionally disabled SSL/TLS certificate validation for the entire Jenkins controller JVM during the deployment/publication of an application. CloudBees CD Plugin no longer does that. Instead, the existing opt-in option to ignore SSL/TLS errors is used during deployment fo...

6.5CVSS6.8AI score0.01303EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/05/24 4:47 p.m.82 views

GHSA-XMQV-PFW7-QMJ7 Jenkins ElectricFlow Plugin globally and unconditionally disabled SSL/TLS certificate validation

CloudBees CD Plugin unconditionally disabled SSL/TLS certificate validation for the entire Jenkins controller JVM during the deployment/publication of an application. CloudBees CD Plugin no longer does that. Instead, the existing opt-in option to ignore SSL/TLS errors is used during deployment fo...

6.5CVSS6.5AI score0.01303EPSS
SaveExploits0References5
Rows per page
Query Builder