[io.jenkins.plugins:cavisson-ns-nd-integration] SSL/TLS certificate validation globally and unconditionally disabled by Jenkins NS-ND Integration Performance Publisher Plugin

NS-ND Integration Performance Publisher Plugin 4.8.0.143 and earlier globally and unconditionally disables SSL/TLS certificate and hostname validation for the entire Jenkins controller JVM.

NS-ND Integration Performance Publisher Plugin 4.8.0.146 no longer disables SSL/TLS certificate and hostname validation globally.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-45391
• https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2910%20(1)
• https://github.com/advisories/GHSA-3vwm-fc87-mq6h