GHSA-3vwm-fc87-mq6hMediumCVSS 5.9

Jenkins NS-ND Integration Performance Publisher Plugin disables SSL/TLS certificate validation globally and unconditionally

Published
November 16, 2022
Last Modified
October 30, 2023

🔗 CVE IDs covered (1)

CVE-2022-45391 →

📋 Description

Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.143 and earlier globally and unconditionally disables SSL/TLS certificate and hostname validation for the entire Jenkins controller JVM.

NS-ND Integration Performance Publisher Plugin 4.8.0.146 no longer disables SSL/TLS certificate and hostname validation globally.

🎯 Affected products1

  • maven/io.jenkins.plugins:cavisson-ns-nd-integration:< 4.8.0.146

🔗 References (5)