Jenkins Active Directory Plugin
Approved changes feed: RSS · Atom
cpe:2.3:a:jenkins_project:jenkins_active_directory_plugin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Jenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462) |
|---|---|
| Product | Jenkins Active Directory Plugin (c80f32f7-a423-5b51-bcb0-b28c9e567db5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-57288 |
vulnerable | 2026-07-29 01:00:29.557824 |
Details available
Jenkins Active Directory Plugin 2.41.1 and earlier does not escape the user name before building the LDAP search filter in the Windows native (ADSI) authentication path, allowing unauthenticated attackers to inject LDAP wildcard characters to enumerate directory entries and to authenticate as a matching user whose password they know without knowing their exact user name.
Published: 2026-06-24T13:20:08.700Z
Updated: 2026-06-24T14:14:28.743Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48919 |
vulnerable | 2026-06-08 08:05:12.364077 |
Details available
Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation.
Published: 2026-05-27T14:13:47.832Z
Updated: 2026-05-27T15:47:35.773Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48918 |
vulnerable | 2026-06-08 08:05:12.363879 |
Details available
Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default.
Published: 2026-05-27T14:13:47.113Z
Updated: 2026-05-27T15:48:34.628Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37943 |
vulnerable | 2026-06-08 06:08:16.562301 |
Details available
Jenkins Active Directory Plugin 2.30 and earlier ignores the "Require TLS" and "StartTls" options and always performs the connection test to Active directory unencrypted, allowing attackers able to capture network traffic between the Jenkins controller and Active Directory servers to obtain Active Directory credentials.
Published: 2023-07-12T15:52:46.885Z
Updated: 2024-11-07T15:02:58.066Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23105 |
vulnerable | 2026-06-08 05:40:56.322163 |
Details available
Jenkins Active Directory Plugin 2.25 and earlier does not encrypt the transmission of data between the Jenkins controller and Active Directory servers in most configurations.
Published: 2022-01-12T19:06:02.000Z
Updated: 2024-08-03T03:36:19.191Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-2303 |
vulnerable | 2026-06-08 05:24:59.250396 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-2302 |
vulnerable | 2026-06-08 05:24:59.249920 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-2301 |
vulnerable | 2026-06-08 05:24:59.249472 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-2300 |
vulnerable | 2026-06-08 05:24:59.249113 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-2299 |
vulnerable | 2026-06-08 05:24:59.247834 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1003009 |
vulnerable | 2026-06-08 05:12:21.398733 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.