Red Hat Security Advisory

RHSA-2013:0700

jenkins security update

Released 2013-04-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Enterprise Node jenkins-1.506-1.el6op

Fixes 1 record

TI-2013-00187 CVE-2013-0253 · GHSA-33jw-8g2v-hrp6

The default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL…

LOW 29

The default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL certificate checks, which allows remote attackers to spoof servers via a man-in-the-middle (MITM) attack.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01557 Published 2013-04-09 Fixed CWE-16