CVE-2023-35142

Summary

CVE-2023-35142 is a vulnerability affecting the Jenkins Checkmarx Plugin version 2022.4.3 and earlier. This issue disables SSL/TLS validation for connections to the Checkmarx server by default, posing a significant risk as it allows man-in-the-middle attacks, data tampering, and unauthorized data access. An attacker can exploit this vulnerability by intercepting and modifying the communication between Jenkins and the Checkmarx server, potentially leading to compromised security scans and sensitive data exposure. To mitigate this risk, it is recommended that users upgrade to the latest version of the plugin and enable SSL/TLS validation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.