CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.1. It affects Jenkins.
CVE
CVE-2017-2649
Severity
HIGH
CVSS
8.1
EPSS
0.96%
Jenkins
Original NVD Description
It was found that the Active Directory Plugin for Jenkins up to and including version 2.2 did not verify certificates of the Active Directory server, thereby enabling Man-in-the-Middle attacks.
Related CVEs
Other vulnerabilities affecting the same vendor(s)