~ / search / GHSA-rr3p-5fcf-v5m3

GHSA-rr3p-5fcf-v5m3

SSL/TLS certificate validation disabled by default in Jenkins Checkmarx Plugin

Source: GitHub Advisory Database (reviewed) High CVE-2023-35142

Packages

EcosystemPackageAffectedFixed in
Maven com.checkmarx.jenkins:checkmarx < 2023.2.6 2023.2.6

Details

As written in the advisory (Markdown source, shown as plain text).

Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default.

References

External links from the advisory. They lead to third-party sites.