In Jenkins Delphix Plugin 3.0.1, a global option for administrators to enable or disable SSL/TLS certificate validation for Data Control Tower (DCT) connections is disabled by default.
References
| Link | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2024/03/06/3 | Mailing List |
| https://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3215 | Vendor Advisory |
| http://www.openwall.com/lists/oss-security/2024/03/06/3 | Mailing List |
| https://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3215 | Vendor Advisory |
Configurations
History
No history.
Information
Published : 2024-03-06 17:15
Updated : 2025-05-07 14:24
NVD link : CVE-2024-28161
Mitre link : CVE-2024-28161
CVE.ORG link : CVE-2024-28161
JSON object : View
Products Affected
jenkins
- delphix
CWE
CWE-295
Improper Certificate Validation
