The Jenkins Eggplant Runner Plugin versions 0.0.1.301.v963cffe8ddb and earlier disable a Java runtime protection mechanism by setting the system property 'jdk.http.auth.tunneling.disabledSchemes' to an empty value during proxy configuration. This action disables a security feature that addresses CVE-2016-5597. No fix is currently available for this vulnerability.