SSL/TLS certificate validation disabled by default in Jenkins Checkmarx Plugin

높음 8.1CVE-2023-35142 · GHSA-rr3p-5fcf-v5m3 · Published 14/06/2023 · updated 17/06/2026

요약

CVE-2023-35142은(는) com.checkmarx.jenkins:checkmarx, checkmarx (jenkins)에 영향을 주는 높음 (CVSS 8.1) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.78%, 전체 취약점의 55.8%보다 높음.
조치: 2023.2.6 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
com.checkmarx.jenkins:checkmarx Maven	`< 2023.2.6`	`2023.2.6`
checkmarx jenkins	`≤ 2023.4.3`	No fix yet

Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default.

NVD description

Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Maven

< 2023.2.6

2023.2.6

≤ 2023.4.3

No fix yet

com.checkmarx.jenkins:checkmarx의 다른 취약점

모두 보기 →