~ / search / GHSA-pfh3-j79r-vqrj

GHSA-pfh3-j79r-vqrj

Jenkins Delphix Plugin has improper SSL/TLS certificate validation

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-28162

Packages

EcosystemPackageAffectedFixed in
Maven org.jenkins-ci.plugins:delphix >= 3.0.1, < 3.1.1 3.1.1

Details

As written in the advisory (Markdown source, shown as plain text).

In Jenkins Delphix Plugin 3.0.1 through 3.1.0 (both inclusive) a global option for administrators to enable or disable SSL/TLS certificate validation for Data Control Tower (DCT) connections fails to take effect until Jenkins is restarted when switching from disabled validation to enabled validation.

References

External links from the advisory. They lead to third-party sites.