Jenkins Project Jenkins Bumblebee HP Alm Plugin
2 CVEs affecting Jenkins Project Jenkins Bumblebee HP Alm Plugin. Latest disclosed: 2021-01-13. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-10444 | Medium | 6.5 | 2019-10-16 | Jenkins Bumblebee HP ALM Plugin 4.1.3 and earlier unconditionally disabled SSL/TLS and hostname verification for connections to HP ALM. |
CVE-2021-21614 | Medium | 5.5 | 2021-01-13 | Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be v… |