description: Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier unconditionally disables SSL/TLS certificate and hostname validation when connecting to a configured NeuVector Vulnerability Scanner server.
affected:
{
defaultStatus: unknown
product: Jenkins NeuVector Vulnerability Scanner Plugin
vendor: Jenkins Project
versions:
lessThanOrEqual: 1.22, status: affected, version: 0, versionType: maven
}