Description
Jenkins Bumblebee HP ALM Plugin 4.1.3 and earlier unconditionally disabled SSL/TLS and hostname verification for connections to HP ALM.
Remediation
References
https://jenkins.io/security/advisory/2019-10-16/#SECURITY-1481
Related Vulnerabilities
CVE-2020-7649 Vulnerability in npm package snyk-broker
CVE-2023-37905 Vulnerability in npm package ckeditor-wordcount-plugin
CVE-2021-32732 Vulnerability in maven package org.xwiki.platform:xwiki-platform-administration-ui
CVE-2018-6341 Vulnerability in npm package vue
CVE-2020-11023 Vulnerability in maven package org.webjars:jquery