vulnerability

Jenkins Advisory 2021-04-07: CVE-2021-22511: SSL/TLS certificate validation unconditionally disabled by OpenText Application Automation Tools Plugin

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:P/A:N)

Published

Apr 8, 2021

Added

Dec 2, 2021

Modified

Mar 27, 2026

Description

Improper Certificate Validation vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow unconditionally disabling of SSL/TLS certificates.

Solutions

jenkins-lts-upgrade-2_277_2jenkins-upgrade-2_287

References

CVE-2021-22511
https://attackerkb.com/topics/CVE-2021-22511
CWE-295
EUVD-EUVD-2022-4859
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-4859
https://jenkins.io/security/advisory/2021-04-07/

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report