Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.5

Micro Focus Jenkins Plugin: Unsecured Connections with Fake Certificates

CVE-2021-22511 · published 5 years ago
Summary

The Micro Focus Jenkins Plugin for Application Automation Tools is vulnerable to a flaw that allows hackers to bypass security checks for website and server identities. This can put your data and connections at risk. Update to version 6.8 or later to fix the issue.

What to do
  • Update jenkins-ci org.jenkins-ci.plugins:hp-application-automation-tools-plugin to version 6.8.
Affected software
Ecosystem VendorProductAffected versions
maven jenkins-ci org.jenkins-ci.plugins:hp-application-automation-tools-plugin <= 6.7
Fix: upgrade to 6.8
– microfocus application_automation_tools <= 6.7
cpe:2.3:a:microfocus:application_automation_tools:*:*:*:*:*:jenkins:*:*
Original advisory text
Improper Certificate Validation vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability coul...
Improper Certificate Validation vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow unconditionally disabling of SSL/TLS certificates.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-295Improper Certificate Validation
Timeline
Published8 Apr 2021
Updated4 Nov 2026
First seen6 Mar 2026
Sources
GHSA-q296-9j5x-fxf4 · GHSA
CVE-2021-22511 · NVD
Track software like this
Free during beta