Aller au contenu

Vulnérabilités de Jenkins project Jenkins Active Directory Plugin

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-57288 Jenkins Active Directory Plugin 2.41.1 and earlier does not escape the user name before building the LDAP search… 3.7 Faible 24 juin 2026
CVE-2026-48918 Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default 6.6 Moyenne 27 mai 2026
CVE-2026-48919 Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation 6.6 Moyenne 27 mai 2026
CVE-2023-37943 Jenkins Active Directory Plugin 2.30 and earlier ignores the "Require TLS" and "StartTls" options and always performs… Non notée 12 juil. 2023
CVE-2022-23105 Jenkins Active Directory Plugin 2.25 and earlier does not encrypt the transmission of data between the Jenkins… Non notée 12 janv. 2022
CVE-2020-2303 A cross-site request forgery (CSRF) vulnerability in Jenkins Active Directory Plugin 2.19 and earlier allows attackers… Non notée 4 nov. 2020
CVE-2020-2302 A missing permission check in Jenkins Active Directory Plugin 2.19 and earlier allows attackers with Overall/Read… Non notée 4 nov. 2020
CVE-2020-2301 Jenkins Active Directory Plugin 2.19 and earlier allows attackers to log in as any user with any password while a… Non notée 4 nov. 2020
CVE-2020-2300 Jenkins Active Directory Plugin 2.19 and earlier does not prohibit the use of an empty password in Windows/ADSI mode,… Non notée 4 nov. 2020
CVE-2020-2299 Jenkins Active Directory Plugin 2.19 and earlier allows attackers to log in as any user if a magic constant is used as… Non notée 4 nov. 2020
CVE-2019-1003009 An improper certificate validation vulnerability exists in Jenkins Active Directory Plugin 2.10 and earlier in… Non notée 6 févr. 2019

Autres produits Jenkins project