CVE-2019-16558 Jenkins Spira Importer Plugin 3.2.3 and earlier disables SSL/TLS certificate validation for the Jenkins master JVM

Description

Jenkins Spira Importer Plugin 3.2.3 and earlier disables SSL/TLS certificate validation for the Jenkins master JVM.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Spira Importer Plugin 3.2	earliest → 3.2.3	No fix stated

Other CVEs of Jenkins Spira Importer Plugin

The 2 CVEs of Jenkins Spira Importer Plugin →

CVE-2019-16543 Jenkins Spira Importer Plugin 3.2.2 and earlier stores credentials unencrypted in its global configuration file on the… Not rated