CVE-2024-28162: Medium severity jenkins delphix vulnerability
In Jenkins Delphix Plugin 3.0.1 through 3.1.0 (both inclusive) a global option for administrators to enable or disable SSL/TLS certificate validation for Data Control Tower (DCT) connections fails to take effect until Jenkins is restarted when switching from disabled validation to enabled validation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28162?
CVE-2024-28162 is classified as a medium severity vulnerability.
How do I fix CVE-2024-28162?
To mitigate CVE-2024-28162, upgrade to Delphix Plugin version 3.1.1 or higher.
What is the impact of CVE-2024-28162?
CVE-2024-28162 allows administrators to disable SSL/TLS certificate validation, potentially exposing sensitive data during Data Control Tower (DCT) connections.
Which versions are affected by CVE-2024-28162?
CVE-2024-28162 affects Delphix Plugin versions 3.0.1 to 3.1.0.
Does switching SSL/TLS validation settings require a restart for CVE-2024-28162?
Yes, changes from disabled to enabled SSL/TLS certificate validation require a Jenkins restart to take effect for CVE-2024-28162.