8.1
High
CVE-2022-41243 Jenkins SmallTest Plugin 1.0.4 and earlier does not perform hostname validation when connecting to the configured View26…
Description
Jenkins SmallTest Plugin 1.0.4 and earlier does not perform hostname validation when connecting to the configured View26 server that could be abused using a man-in-the-middle attack to intercept these connections.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins SmallTest Plugin 1.0 | earliest → 1.0.4 | No fix stated |