| Package | Affected versions | Patched versions |
|---|---|---|
| io.jenkins.plugins:cavisson-ns-nd-integration | < 4.8.0.146 | 4.8.0.146 |
| ns-nd integration performance publisher | < 4.8.0.146 | 4.8.0.146 |
Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.143 and earlier globally and unconditionally disables SSL/TLS certificate and hostname validation for the entire Jenkins controller JVM.
NS-ND Integration Performance Publisher Plugin 4.8.0.146 no longer disables SSL/TLS certificate and hostname validation globally.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free