Spira Importer (Jenkins) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2019-12-17. Vendor: Jenkins.

CVEs of Spira Importer

• CVE-2019-16558 - CVSS 8.2 (high), 2019-12-17: Jenkins Spira Importer Plugin 3.2.3 and earlier disables SSL/TLS certificate validation for the Jenkins master JVM.
• CVE-2019-16543 - CVSS 5.5 (medium), 2019-11-21: Jenkins Spira Importer Plugin 3.2.2 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed…