CVE-2022-23105

2022-01-1220:15:09

Google

osv.dev

0.001 Low

EPSS

Percentile

28.0%

JSON

Jenkins Active Directory Plugin 2.25 and earlier does not encrypt the transmission of data between the Jenkins controller and Active Directory servers in most configurations.

CPENameOperatorVersion
active-directory-plugineqactive-directory-2.2
active-directory-plugineqactive-directory-2.7
active-directory-plugineqactive-directory-1.37
active-directory-plugineqactive-directory-1.41
active-directory-plugineqactive-directory-2.23
active-directory-plugineqactive-directory-1.27
active-directory-plugineqactive-directory-2.12
active-directory-plugineqactive-directory-1.45
active-directory-plugineqactive-directory-1.47
active-directory-plugineqactive-directory-1.25

Name	Operator	Version
active-directory-plugin	eq	active-directory-2.2
active-directory-plugin	eq	active-directory-2.7
active-directory-plugin	eq	active-directory-1.37
active-directory-plugin	eq	active-directory-1.41
active-directory-plugin	eq	active-directory-2.23
active-directory-plugin	eq	active-directory-1.27
active-directory-plugin	eq	active-directory-2.12
active-directory-plugin	eq	active-directory-1.45
active-directory-plugin	eq	active-directory-1.47
active-directory-plugin	eq	active-directory-1.25