GitHub Advisoryadvisory · Maven

GHSA-2j5w-cwc3-8hxw Improper Certificate Validation in Jenkins Spira Importer Plugin

HIGH Published 2022-05-24 Modified 2022-11-01 Official page ↗

Aliases: CVE-2019-16558
Ecosystem: Maven
Packages: com.inflectra.spiratest.plugins:inflectra-spira-integration
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Weaknesses: CWE-295
Reviewed: 2022-11-01

Affected packages

• Maven com.inflectra.spiratest.plugins:inflectra-spira-integration: < 3.2.4 → fixed in 3.2.4

Description

Jenkins Spira Importer Plugin 3.2.3 and earlier disables SSL/TLS certificate validation for the Jenkins master JVM.

Related

Alias · CVE (1)

CVE-2019-16558 Jenkins Spira Importer Plugin 3.2.3 and earlier disables SSL/TLS certificate validation for the Jenkins master JVM. vulnerability

Weakness · CWE (1)

CWE-295 Improper Certificate Validation weakness

References