Jenkins Active Directory Plugin Information Disclosure Vulnerability

Jenkins is a Jenkins open source application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Active Directory Plugin 2.25 and earlier versions are vulnerable to an information disclosure vulnerability that stems from the fact that in most configurations there is no encryption between the Jenkins controller and the Active Directory server in most configurations. An attacker could use this vulnerability to intercept and obtain information from the transfer.