CVE-2019-10446

Name of the Vulnerable Software and Affected Versions Jenkins Cadence vManager Plugin versions prior to 2.7.1

Description The issue concerns the disabling of SSL/TLS and hostname verification globally for the Jenkins master JVM. This affects the security of the Jenkins master JVM, potentially exposing it to man-in-the-middle attacks or other security risks. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For Jenkins Cadence vManager Plugin versions prior to 2.7.1, update to version 2.7.1 or later to resolve the issue. As a temporary workaround, consider re-enabling SSL/TLS and hostname verification globally for the Jenkins master JVM until the update can be applied.