~ / search / GHSA-qgp8-h5cp-r75r

GHSA-qgp8-h5cp-r75r

Jenkins Bumblebee HP ALM Plugin unconditionally disabled SSL/TLS certificate validation

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-10444

Packages

EcosystemPackageAffectedFixed in
Maven org.jenkins-ci.plugins:bumblebee < 4.1.4 4.1.4

Details

As written in the advisory (Markdown source, shown as plain text).

Jenkins Bumblebee HP ALM Plugin unconditionally disabled SSL/TLS certificate validation for connections to the HP ALM service. Bumblebee HP ALM Plugin no longer does that. Instead, it now allows users to opt out of certificate validation.

References

External links from the advisory. They lead to third-party sites.