← All advisories

Moderate severityNVD Advisory· Published Aug 7, 2019· Updated Aug 4, 2024

CVE-2019-10381

CVE-2019-10381

Description

Jenkins Codefresh Integration Plugin 1.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.jenkins-ci.plugins:codefreshMaven	<= 1.8	—

Affected products

2

ghsa-coords
pkg:maven/org.jenkins-ci.plugins/codefresh
Range: <= 1.8
Jenkins Project/Codefresh Integration Plugincpe-rescue
Range: 1.8 and earlier

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-862j-cv9p-6hpfghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-10381ghsaADVISORY
www.openwall.com/lists/oss-security/2019/08/07/1ghsamailing-listx_refsource_MLISTWEB
jenkins.io/security/advisory/2019-08-07/ghsax_refsource_CONFIRMWEB

News mentions

0

No linked articles in our index yet.