SSL/TLS certificate validation disabled by default in Jenkins Checkmarx Plugin

ALTO 8.1CVE-2023-35142 · GHSA-rr3p-5fcf-v5m3 · Published 14/06/2023 · updated 17/06/2026

Em resumo

CVE-2023-35142 é uma vulnerabilidade ALTO (CVSS 8.1) que afeta com.checkmarx.jenkins:checkmarx, checkmarx (jenkins).
Chance de exploração nos próximos 30 dias (EPSS): 0.78%, maior que 55.8% das vulnerabilidades.
Correção: atualize para 2023.2.6 ou posterior.

Package	Affected versions	Patched versions
com.checkmarx.jenkins:checkmarx Maven	`< 2023.2.6`	`2023.2.6`
checkmarx jenkins	`≤ 2023.4.3`	No fix yet

Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default.

NVD description

Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Maven

< 2023.2.6

2023.2.6

≤ 2023.4.3

No fix yet

Mais vulnerabilidades de com.checkmarx.jenkins:checkmarx

Ver tudo →