CVE-2022-45391

Description

Jenkins NS-ND Integration Performance Publisher Plugin disables SSL/TLS certificate validation globally and unconditionally

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-45391
• https://github.com/jenkinsci/cavisson-ns-nd-integration-plugin
• https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2910%20%281%29
• https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2910%20(1)
• http://www.openwall.com/lists/oss-security/2022/11/15/4