Executive brief
Jenkins ElectricFlow Plugin globally and unconditionally disabled SSL/TLS certificate validation
Affected products
- Maven org.jenkins-ci.plugins:electricflow
Junglewise Threat Intelligence
CVE-2019-10334: Jenkins ElectricFlow Plugin globally and unconditionally disabled SSL/TLS certificate validation
CVE-2019-10334 · Severity: low · CVSS 3 · Published 2022-05-24
Technologies: org.jenkins-ci.plugins:electricflow (Maven). Vendors: Maven.
Related threats
- Jenkins CloudBees CD Plugin vulnerable to arbitrary file deletion
- Jenkins CloudBees CD Plugin vulnerable to arbitrary file read
- Jenkins ElectricFlow Plugin missing permission check
- Jenkins ElectricFlow Plugin is vulnerable to reflected cross site scripting vulnerability
- Jenkins ElectricFlow Plugin Missing permission checks