SSL/TLS certificate validation unconditionally disabled by Jenkins Micro Focus Application Automation Tools Plugin

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-22511 · ADVISORY
• jenkinsci/hpe-application-automation-tools-plugin commit b286378 · WEB
• jenkinsci/hpe-application-automation-tools-plugin · PACKAGE
• jenkins.io/security/advisory/2021-04-07 · WEB

org.jenkins-ci.plugins:hp-application-automation-tools-plugin のその他の脆弱性

• CVE-2021-22513中 6.5Missing Authorization vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6…
• CVE-2021-22512中 6.5Cross-Site Request Forgery (CSRF) vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affec…
• CVE-2021-22510中 6.1Reflected XSS vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects all version 6.7 a…