Aller au contenu
en Se connecter
Non notée

CVE-2019-1003009 An improper certificate validation vulnerability exists in Jenkins Active Directory Plugin 2.10 and earlier in…

Description

An improper certificate validation vulnerability exists in Jenkins Active Directory Plugin 2.10 and earlier in src/main/java/hudson/plugins/active_directory/ActiveDirectoryDomain.java, src/main/java/hudson/plugins/active_directory/ActiveDirectorySecurityRealm.java, src/main/java/hudson/plugins/active_directory/ActiveDirectoryUnixAuthenticationProvider.java that allows attackers to impersonate the Active Directory server Jenkins connects to for authentication if Jenkins is configured to use StartTLS.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins Active Directory Plugin Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Jenkins Active Directory Plugin

Les 11 CVE de Jenkins Active Directory Plugin →
CVE-2026-57288 Jenkins Active Directory Plugin 2.41.1 and earlier does not escape the user name before building the LDAP search… 3.7 Faible CVE-2026-48918 Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default 6.6 Moyenne CVE-2026-48919 Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation 6.6 Moyenne CVE-2023-37943 Jenkins Active Directory Plugin 2.30 and earlier ignores the "Require TLS" and "StartTls" options and always performs… Non notée
Suivre cette CVE