24 matches found
CVE-2019-10317
The CVE-2019-10317 entry affects the Jenkins SiteMonitor Plugin (version 0.5 and earlier), which unconditionally disabled SSL/TLS certificate validation and hostname verification for the Jenkins controller JVM. Root cause: the plugin’s behavior bypassed standard TLS checks globally, exposing the ...
CVE-2019-10317
Jenkins SiteMonitor Plugin 0.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM...
PT-2019-11719 · Jenkins · Jenkins Sitemonitor Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins SiteMonitor Plugin version 0.5 and earlier Description: The issue concerns the Jenkins SiteMonitor Plugin, which unconditionally disables SSL/TLS certificate validation for the entire Jenkins controller JVM. This means that the plugin...
