CVE-2019-16561

Publication date

2019-12-17 14:40:50

Family

jenkins

State

PUBLISHED

Description

Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows users with Overall/Read access to disable SSL/TLS certificate and hostname validation for the entire Jenkins master JVM.