CVE-2019-16558
CVE-2019-16558
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
17 Dec 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Jenkins Spira Importer Plugin 3.2.3 and earlier disables SSL/TLS certificate validation for the Jenkins master JVM.
Affected products
Jenkins project · Jenkins Spira Importer Plugin