CVE-2023-35142
CVSS 3.1 Score 8.1 of 10 (high)
Details
Summary
CVE-2023-35142 is a vulnerability affecting the Jenkins Checkmarx Plugin version 2022.4.3 and earlier. This issue disables SSL/TLS validation for connections to the Checkmarx server by default, posing a significant risk as it allows man-in-the-middle attacks, data tampering, and unauthorized data access. An attacker can exploit this vulnerability by intercepting and modifying the communication between Jenkins and the Checkmarx server, potentially leading to compromised security scans and sensitive data exposure. To mitigate this risk, it is recommended that users upgrade to the latest version of the plugin and enable SSL/TLS validation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions