Jenkins Inedo ProGet Plugin globally and unconditionally disabled SSL/TLS certificate validation

Description

References

• nvd.nist.gov/vuln/detail/CVE-2018-1999034 · ADVISORY
• jenkins.io/security/advisory/2018-07-30 · WEB

com.inedo.proget:inedo-proget의 다른 취약점

• CVE-2019-10412높음 7.5Jenkins Inedo ProGet Plugin 1.2 and earlier transmitted configured credentials in plain text as part of the global Jenkins configuration for…
• CVE-2019-10411높음 7.5Jenkins Inedo BuildMaster Plugin 2.4.0 and earlier transmitted configured credentials in plain text as part of the global Jenkins configurat…