Jenkins Inedo ProGet Plugin globally and unconditionally disabled SSL/TLS certificate validation

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2018-1999034 · ADVISORY
• jenkins.io/security/advisory/2018-07-30 · WEB

com.inedo.proget:inedo-proget のその他の脆弱性

• CVE-2019-10412高 7.5Jenkins Inedo ProGet Plugin 1.2 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration for…
• CVE-2019-10411高 7.5Jenkins Inedo BuildMaster Plugin 2.4.0 and earlier transmitted configured credentials in plain text as part of the global Jenkins configurat…