Jenkins VMware Lab Manager Slaves Plugin vulnerable to Improper Certificate Validation

보통 6.5CVE-2019-10382 · GHSA-jxg7-cghf-mggx · Published 07/08/2019 · updated 17/06/2026

요약

CVE-2019-10382은(는) org.jenkins-ci.plugins:labmanager, vmware lab manager slaves (jenkins)에 영향을 주는 보통 (CVSS 6.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.84%, 전체 취약점의 58.0%보다 높음.
아직 패치 버전 정보가 없습니다. 참고 자료의 공급업체 권고를 확인하세요.

Package	Affected versions	Patched versions
org.jenkins-ci.plugins:labmanager Maven	`≤ 0.2.8`	No fix yet
vmware lab manager slaves jenkins	`≤ 0.2.8`	No fix yet

VMware Lab Manager Slaves Plugin unconditionally disables SSL/TLS certificate validation for the entire Jenkins controller JVM.

As of publication of this advisory, there is no fix.

NVD description

Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

요약

CVE-2019-10382은(는) org.jenkins-ci.plugins:labmanager, vmware lab manager slaves (jenkins)에 영향을 주는 보통 (CVSS 6.5) 취약점입니다.

향후 30일 내 악용 확률(EPSS): 0.84%, 전체 취약점의 58.0%보다 높음.

아직 패치 버전 정보가 없습니다. 참고 자료의 공급업체 권고를 확인하세요.

Package

Affected versions

Patched versions

Maven

≤ 0.2.8

No fix yet

≤ 0.2.8

No fix yet

Description

VMware Lab Manager Slaves Plugin unconditionally disables SSL/TLS certificate validation for the entire Jenkins controller JVM.

As of publication of this advisory, there is no fix.

NVD description

Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM.

org.jenkins-ci.plugins:labmanager의 다른 취약점

모두 보기 →