vulnerability

Jenkins Advisory 2021-04-07: CVE-2021-22511: SSL/TLS certificate validation unconditionally disabled by OpenText Application Automation Tools Plugin

Severity
6
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:N)
Published
Apr 8, 2021
Added
Dec 2, 2021
Modified
Aug 11, 2025

Description

Improper Certificate Validation vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow unconditionally disabling of SSL/TLS certificates.

Solutions

jenkins-lts-upgrade-2_277_2jenkins-upgrade-2_287
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.