PT-2019-14713 · Jenkins · Jenkins Spira Importer Plugin+1

Daniel Beck

·

CVE-2019-16558

·

Publicado

2019-12-17

·

Atualizado

2023-10-25

CVSS v3.1

8.2

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Name of the Vulnerable Software and Affected Versions Jenkins Spira Importer Plugin versions 3.2.3 and earlier
Description The issue concerns the disabling of SSL/TLS certificate validation for the Jenkins master JVM.
Recommendations For Jenkins Spira Importer Plugin versions 3.2.3 and earlier, update to a version that re-enables SSL/TLS certificate validation to prevent potential man-in-the-middle attacks.

Correção

Improper Certificate Validation

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

CVE-2019-16558
GHSA-2J5W-CWC3-8HXW

Produtos afetados

Jenkins
Jenkins Spira Importer Plugin