Jenkins NS-ND Integration Performance Publisher Plugin disables SSL/TLS certificate validation globally and unconditionally

2022-11-1612:00:23

Google

osv.dev

jenkins

integration

ssl/tls

certificate

validation

plugin

performance

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

34.3%

JSON

Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.143 and earlier globally and unconditionally disables SSL/TLS certificate and hostname validation for the entire Jenkins controller JVM.

NS-ND Integration Performance Publisher Plugin 4.8.0.146 no longer disables SSL/TLS certificate and hostname validation globally.

CPENameOperatorVersion
io.jenkins.plugins:cavisson-ns-nd-integrationeq4.6.1.79
io.jenkins.plugins:cavisson-ns-nd-integrationeq4.6.1.80
io.jenkins.plugins:cavisson-ns-nd-integrationeq4.6.0.24
io.jenkins.plugins:cavisson-ns-nd-integrationeq4.6.1.66
io.jenkins.plugins:cavisson-ns-nd-integrationeq4.6.0.23
io.jenkins.plugins:cavisson-ns-nd-integrationeq4.6.1.85
io.jenkins.plugins:cavisson-ns-nd-integrationeq4.6.1.68
io.jenkins.plugins:cavisson-ns-nd-integrationeq4.6.1.65
io.jenkins.plugins:cavisson-ns-nd-integrationeq4.8.0.143
io.jenkins.plugins:cavisson-ns-nd-integrationeq4.6.1.83

Name	Operator	Version
io.jenkins.plugins:cavisson-ns-nd-integration	eq	4.6.1.79
io.jenkins.plugins:cavisson-ns-nd-integration	eq	4.6.1.80
io.jenkins.plugins:cavisson-ns-nd-integration	eq	4.6.0.24
io.jenkins.plugins:cavisson-ns-nd-integration	eq	4.6.1.66
io.jenkins.plugins:cavisson-ns-nd-integration	eq	4.6.0.23
io.jenkins.plugins:cavisson-ns-nd-integration	eq	4.6.1.85
io.jenkins.plugins:cavisson-ns-nd-integration	eq	4.6.1.68
io.jenkins.plugins:cavisson-ns-nd-integration	eq	4.6.1.65
io.jenkins.plugins:cavisson-ns-nd-integration	eq	4.8.0.143
io.jenkins.plugins:cavisson-ns-nd-integration	eq	4.6.1.83