Executive brief
Jenkins Active Directory Plugin vulnerable to Active Directory credential disclosure
Affected products
- Maven org.jenkins-ci.plugins:active-directory
Junglewise Threat Intelligence
CVE-2023-37943: Jenkins Active Directory Plugin vulnerable to Active Directory credential disclosure
CVE-2023-37943 · Severity: low · CVSS 3.1 · Published 2023-07-12
Technologies: org.jenkins-ci.plugins:active-directory (Maven). Vendors: Maven.
Related threats
- Jenkins Active Directory Plugin LDAP injection in ADSI authentication path
- Jenkins Active Directory Plugin deserialization via LDAP referrals
- Jenkins Active Directory Plugin RCE via LDAP referral following
- Missing permission check in Jenkins Active Directory Plugin allows accessing domain health check page
- CSRF vulnerability in Jenkins Active Directory Plugin