AVG-2448 log
Package | jenkins |
Status | Fixed |
Severity | Medium |
Type | certificate verification bypass |
Affected | 2.314-1 |
Fixed | 2.315-1 |
Current | 2.483-1 [extra] |
Ticket | None |
Created | Thu Oct 7 06:59:52 2021 |
Issue | Severity | Remote | Type | Description |
---|---|---|---|---|
CVE-2014-3577 | Medium | Yes | Certificate verification bypass | Jenkins 2.314 and earlier bundles a version of the commons-httpclient library with the vulnerability CVE-2014-3577 that incorrectly verified SSL/TLS... |