CVE-2019-10382 - Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM

MEDIUM

Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM

Published Aug 7, 2019

6.5

MEDIUM

CVSS 3.1

EPSS 0.84%

Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM.

Vendor Jenkins project Product Jenkins VMware Lab Manager Slaves Plugin Default
unknown
Affected
- 0.2.8 and earlier

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Jenkins project	Jenkins VMware Lab Manager Slaves Plugin	unknown	Affected 0.2.8 and earlier

No remediation recorded yet.

Weaknesses (1)

CWE-295

Improper Certificate Validation

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2019/08/07/1		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-4460		Advisory
https://github.com/advisories/GHSA-jxg7-cghf-mggx		Advisory
https://jenkins.io/security/advisory/2019-08-07/#SECURITY-1376		x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10382