CVE-2022-23105

Published: Jan 12, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

Jenkins Active Directory Plugin 2.25 and earlier does not encrypt the transmission of data between the Jenkins controller and Active Directory servers in most configurations.

Vendor	Product	Versions
Jenkins project	Jenkins Active Directory Plugin	affected `unspecified - <= 2.25` unaffected `2.23.1` unaffected `2.24.1`

References

https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-1389

x_refsource_CONFIRM

[oss-security] 20220112 Multiple vulnerabilities in Jenkins and Jenkins plugins

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2022-23105

Description

Affected Products

References