CVEDB API

Jenkins Codefresh Integration Plugin 1.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 16.4%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 4.3

References

Products affected by CVE-2019-10381

Jenkins » Codefresh Integration » Version: N/A

cpe:2.3:a:jenkins:codefresh_integration:-
Jenkins » Codefresh Integration » Version: 1.0

cpe:2.3:a:jenkins:codefresh_integration:1.0
Jenkins » Codefresh Integration » Version: 1.1

cpe:2.3:a:jenkins:codefresh_integration:1.1
Jenkins » Codefresh Integration » Version: 1.2

cpe:2.3:a:jenkins:codefresh_integration:1.2
Jenkins » Codefresh Integration » Version: 1.3

cpe:2.3:a:jenkins:codefresh_integration:1.3
Jenkins » Codefresh Integration » Version: 1.4

cpe:2.3:a:jenkins:codefresh_integration:1.4
Jenkins » Codefresh Integration » Version: 1.5

cpe:2.3:a:jenkins:codefresh_integration:1.5
Jenkins » Codefresh Integration » Version: 1.6

cpe:2.3:a:jenkins:codefresh_integration:1.6
Jenkins » Codefresh Integration » Version: 1.7

cpe:2.3:a:jenkins:codefresh_integration:1.7
Jenkins » Codefresh Integration » Version: 1.8

cpe:2.3:a:jenkins:codefresh_integration:1.8