CVE-2017-2649CWE-295

It was found that the Active Directory Plugin for Jenkins up to and including version 2.2 did not verify certificates of the Active Directory server, thereby…

published July 27, 2018

CVSS
—
EPSS
1%
Percentile
60.6
In the wild
Unconfirmed
What it is

It was found that the Active Directory Plugin for Jenkins up to and including version 2.2 did not verify certificates of the Active Directory server, thereby enabling Man-in-the-Middle attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00947 · 60.6th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2018-07-27T20:00Z
EPSS history
Timeline
  • 27 JUL 20:00Z
    It was found that the Active Directory Plugin for Jenkins up to and including version 2.2 did not verify certificates of the Active Directory server, thereby…
    cvelistv5