Executive brief
Jenkins Active Directory Plugin Improper certificate validation with StartTLS
Affected products
- Maven org.jenkins-ci.plugins:active-directory
Junglewise Threat Intelligence
CVE-2019-1003009: Jenkins Active Directory Plugin Improper certificate validation with StartTLS
CVE-2019-1003009 · Severity: low · CVSS 3 · Published 2022-05-13
Technologies: org.jenkins-ci.plugins:active-directory (Maven). Vendors: Maven.
Related threats
- Jenkins Active Directory Plugin LDAP injection in ADSI authentication path
- Jenkins Active Directory Plugin deserialization via LDAP referrals
- Jenkins Active Directory Plugin RCE via LDAP referral following
- Jenkins Active Directory Plugin vulnerable to Active Directory credential disclosure
- Missing permission check in Jenkins Active Directory Plugin allows accessing domain health check page