CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-30516

Jenkins Image Tag Parameter Plugin 2.0 improperly introduces an option to opt out of SSL/TLS certificate validation when connecting to Docker registries, resulting in job configurations using Image Tag Parameters that were created before 2.0 having SSL/TLS certificate validation disabled by default.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 6.6%

CVSS Severity

CVSS v3 Score 6.5

References

Products affected by CVE-2023-30516

Jenkins » Image Tag Parameter » Version: 1.1

cpe:2.3:a:jenkins:image_tag_parameter:1.1
Jenkins » Image Tag Parameter » Version: 1.1.1

cpe:2.3:a:jenkins:image_tag_parameter:1.1.1
Jenkins » Image Tag Parameter » Version: 1.10

cpe:2.3:a:jenkins:image_tag_parameter:1.10
Jenkins » Image Tag Parameter » Version: 1.2

cpe:2.3:a:jenkins:image_tag_parameter:1.2
Jenkins » Image Tag Parameter » Version: 1.3

cpe:2.3:a:jenkins:image_tag_parameter:1.3
Jenkins » Image Tag Parameter » Version: 1.4

cpe:2.3:a:jenkins:image_tag_parameter:1.4
Jenkins » Image Tag Parameter » Version: 1.5

cpe:2.3:a:jenkins:image_tag_parameter:1.5
Jenkins » Image Tag Parameter » Version: 1.6

cpe:2.3:a:jenkins:image_tag_parameter:1.6
Jenkins » Image Tag Parameter » Version: 1.7

cpe:2.3:a:jenkins:image_tag_parameter:1.7
Jenkins » Image Tag Parameter » Version: 1.8

cpe:2.3:a:jenkins:image_tag_parameter:1.8
Jenkins » Image Tag Parameter » Version: 1.8.1

cpe:2.3:a:jenkins:image_tag_parameter:1.8.1
Jenkins » Image Tag Parameter » Version: 1.8.2

cpe:2.3:a:jenkins:image_tag_parameter:1.8.2
Jenkins » Image Tag Parameter » Version: 1.9

cpe:2.3:a:jenkins:image_tag_parameter:1.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-30516

Products

Pricing

Contact Us