Executive brief
Jenkins NeuVector Vulnerability Scanner Plugin disables SSL/TLS certificate and hostname validation
Affected products
- Maven io.jenkins.plugins:neuvector-vulnerability-scanner
Junglewise Threat Intelligence
CVE-2023-30517: Jenkins NeuVector Vulnerability Scanner Plugin disables SSL/TLS certificate and hostname validation
CVE-2023-30517 · Severity: low · CVSS 3.1 · Published 2023-04-12
Technologies: io.jenkins.plugins:neuvector-vulnerability-scanner (Maven). Vendors: Maven.
Related threats
- Jenkins NeuVector Vulnerability Scanner Plugin missing permission check
- Jenkins NeuVector Vulnerability Scanner Plugin Cross-Site Request Forgery vulnerability
- Content-Security-Policy protection for user content disabled by Jenkins NeuVector Vulnerability Scanner Plugin
- Jenkins NeuVector Vulnerability Scanner Plugin stored credentials in plain text