CVE-2019-10317

CVE-2019-10317: vulnerability in Jenkins SiteMonitor Plugin

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.5%
Jenkins SiteMonitor Plugin 0.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM.
Related CVEs — Jenkins SiteMonitor Plugin

In the same product, most dangerous first.