Description

A man in the middle vulnerability exists in Jenkins CollabNet Plugin 2.0.4 and earlier in CollabNetApp.java, CollabNetPlugin.java, CNFormFieldValidator.java that allows attackers to impersonate any service that Jenkins connects to.

Remediation

References

https://jenkins.io/security/advisory/2018-06-25/#SECURITY-941

Related Vulnerabilities

CVE-2011-1184 Vulnerability in maven package tomcat:catalina

CVE-2023-35156 Vulnerability in maven package org.xwiki.platform:xwiki-platform-flamingo-skin-resources

CVE-2022-34812 Vulnerability in maven package org.jenkins-ci.plugins:xpath-config-viewer

CVE-2023-37963 Vulnerability in maven package io.jenkins.plugins:benchmark-evaluator

CVE-2023-48219 Vulnerability in npm package tinymce

Severity

High

Classification

CWE-295 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Tags

Vendor Advisory