Jenkins Proxmox Plugin 0.6.0 and earlier disables SSL/TLS certificate validation globally for the Jenkins controller JVM when configured to ignore SSL/TLS issues.

Affected Packages

Maven org.jenkins-ci.plugins:proxmox

Affected versions: 0 (fixed in 0.7.0)

Related CVEs

CVE-2022-28142

Key Information

GHSA ID

GHSA-fhhx-r983-44xc

Published

March 30, 2022 12:00 AM

Last Modified

November 29, 2022 11:03 PM

CVSS Score

5.0 /10

Primary Ecosystem

Maven

Primary Package

org.jenkins-ci.plugins:proxmox

GitHub Reviewed

✓ Yes

Dataset

Last updated: July 5, 2025 6:26 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.