high8.2
CVE-2019-16558
Improper Certificate Validation in Jenkins Spira Importer Plugin
Impact
Jenkins Spira Importer Plugin 3.2.3 and earlier disables SSL/TLS certificate validation for the Jenkins master JVM.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | com.inflectra.spiratest.plugins:inflectra-spira-integration | < 3.2.4 | 3.2.4 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Spira Importer | through 3.2.3 |