Improper Certificate Validation in Jenkins Spira Importer Plugin

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2019-16558 · ADVISORY
• jenkins.io/security/advisory/2019-12-17 · WEB
• openwall.com/lists/oss-security/2019/12/17/1 · WEB

com.inflectra.spiratest.plugins:inflectra-spira-integration のその他の脆弱性

• CVE-2019-16543中 5.5Jenkins Spira Importer Plugin 3.2.2 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where …