Non évaluée
It was found that the Active Directory Plugin for Jenkins up to and including version 2.2 did not verify certificates of the Active Directory server,...
CVE-2017-2649
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
It was found that the Active Directory Plugin for Jenkins up to and including version 2.2 did not verify certificates of the Active Directory server, thereby enabling Man-in-the-Middle attacks.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory securityfocus.com
- advisory jenkins.io