aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.5, <=0.0.6), appscanstandard-integration:ibm-security-appscanstandard-scanner (>=1.0, <=2.0) +173 more potentially affected by CVE-2024-43044 via org.jenkins-ci.main:remoting (2.60)

org.jenkins-ci.main:remoting MAVEN version 2.60 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:remoting and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin =0.0.5, =1.0, =0.1.1, =1.4, =3.2.2, =1.2, =0.0....

SSL/TLS certificate validation globally and unconditionally disabled by inflectra-spira-integration

inflectra-spira-integration 3.2.3 and earlier unconditionally disables SSL/TLS certificate validation for the entire Jenkins controller JVM. inflectra-spira-integration 3.2.4 no longer disables SSL/TLS certificate validation...

inflectra-spira-integration stored credentials in plain text

inflectra-spira-integration stored a credential unencrypted in its global configuration file com.inflectra.spiratest.plugins.SpiraBuilder.xml on the Jenkins controller. This credential could be viewed by users with access to the Jenkins controller file system. inflectra-spira-integration now stor...