org.jenkins-ci.plugins:active-directory

2 results · Clear filters · Feed

• High 7.4
  CVE-2019-1003009

  Jenkins Active Directory Plugin Improper certificate validation with StartTLS

  An improper certificate validation vulnerability exists in Jenkins Active Directory Plugin 2.10 and earlier in src/main/java/hudson/plugins/active_directory/ActiveDirectoryDomain.java, src/main/java/hudson/plugins/active_directory/ActiveDirectorySecurityRealm…

  Jenkins Project Jenkins Active Directory Plugin org.jenkins-ci.plugins:active-directory Web / CMS Maven
  Feb 6, 2019
• High 8.1
  CVE-2017-2649

  Jenkins Active Directory Plugin did not verify certificate of AD server

  It was found that the Active Directory Plugin for Jenkins up to and including version 2.2 did not verify certificates of the Active Directory server, thereby enabling Man-in-the-Middle attacks.

  Jenkins Project Active Directory Jenkins plugin org.jenkins-ci.plugins:active-directory Web / CMS Maven
  Jul 27, 2018