{"action":"Upgrade org.jenkins-ci.plugins:hp-application-automation-tools-plugin to 6.8 or later.","affected":[{"fixed":"6.8","introduced":"0"}],"component":"org.jenkins-ci.plugins:hp-application-automation-tools-plugin","cve_ids":["CVE-2021-22511"],"ecosystem":"Maven","epss":0.00404,"exploited":false,"fixed_versions":["6.8"],"ghsa_id":"GHSA-q296-9j5x-fxf4","id":"tcs_01M5N98C03W1HFW0PGQ4J038FA","modified_at":"2024-02-16T08:08:54.541127Z","published_at":"2022-05-24T17:46:58Z","references":["https://osv.dev/vulnerability/GHSA-q296-9j5x-fxf4","https://nvd.nist.gov/vuln/detail/CVE-2021-22511","https://github.com/jenkinsci/hpe-application-automation-tools-plugin/commit/b286378aa22bc48ed77d259200cb6863a532c2df","https://github.com/jenkinsci/hpe-application-automation-tools-plugin","https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2176"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-q296-9j5x-fxf4","url":"https://osv.dev/vulnerability/GHSA-q296-9j5x-fxf4"}],"summary":"SSL/TLS certificate validation unconditionally disabled by Jenkins Micro Focus Application Automation Tools Plugin"}