Description
A man in the middle vulnerability exists in Jenkins CollabNet Plugin 2.0.4 and earlier in CollabNetApp.java, CollabNetPlugin.java, CNFormFieldValidator.java that allows attackers to impersonate any service that Jenkins connects to.
Remediation
References
https://jenkins.io/security/advisory/2018-06-25/#SECURITY-941
Related Vulnerabilities
CVE-2017-2585 Vulnerability in maven package org.keycloak:keycloak-server-spi-private
CVE-2011-1026 Vulnerability in maven package org.apache.archiva:archiva
CVE-2022-43415 Vulnerability in maven package org.jenkins-ci.plugins:repo
CVE-2020-11988 Vulnerability in maven package org.apache.xmlgraphics:xmlgraphics-commons
CVE-2023-33201 Vulnerability in maven package org.bouncycastle:bcprov-ext-jdk14