~ / search / GHSA-2j5w-cwc3-8hxw

GHSA-2j5w-cwc3-8hxw

Improper Certificate Validation in Jenkins Spira Importer Plugin

Source: GitHub Advisory Database (reviewed) High CVE-2019-16558

Packages

EcosystemPackageAffectedFixed in
Maven com.inflectra.spiratest.plugins:inflectra-spira-integration < 3.2.4 3.2.4

Details

As written in the advisory (Markdown source, shown as plain text).

Jenkins Spira Importer Plugin 3.2.3 and earlier disables SSL/TLS certificate validation for the Jenkins master JVM.

References

External links from the advisory. They lead to third-party sites.