GHSA-rr3p-5fcf-v5m3

GitHub Security Advisory

SSL/TLS certificate validation disabled by default in Jenkins Checkmarx Plugin

✓ GitHub Reviewed HIGH Has CVE

Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default.

Maven com.checkmarx.jenkins:checkmarx

Affected versions: 0 (fixed in 2023.2.6)

CVE-2023-35142

GHSA ID

GHSA-rr3p-5fcf-v5m3

Published

June 14, 2023 3:30 PM

Last Modified

January 30, 2024 11:13 PM

CVSS Score

7.5 /10

Primary Ecosystem

Maven

Primary Package

com.checkmarx.jenkins:checkmarx

GitHub Reviewed

✓ Yes

Last updated: August 24, 2025 6:28 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.