high8.1
CVE-2023-35142
SSL/TLS certificate validation disabled by default in Jenkins Checkmarx Plugin
Impact
Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | com.checkmarx.jenkins:checkmarx | <= 2022.4.3 | 2023.2.6 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Checkmarx | through 2023.4.3 |