CVE-2022-23105: Medium severity jenkins active directory vulnerability
Jenkins Active Directory Plugin 2.25 and earlier does not encrypt the transmission of data between the Jenkins controller and Active Directory servers in most configurations.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-23105?
CVE-2022-23105 is a vulnerability in the Jenkins Active Directory Plugin 2.25 and earlier that allows for the transmission of unencrypted data between the Jenkins controller and Active Directory servers.
How severe is CVE-2022-23105?
CVE-2022-23105 has a severity value of 6.5, which is considered a medium severity vulnerability.
How does CVE-2022-23105 affect Jenkins Active Directory Plugin?
CVE-2022-23105 affects Jenkins Active Directory Plugin versions 2.25 and earlier by not encrypting the transmission of data between the Jenkins controller and Active Directory servers in most configurations.
How do I fix CVE-2022-23105?
To fix CVE-2022-23105, it is recommended to upgrade the Jenkins Active Directory Plugin to version 2.26 or later, which includes a fix for the vulnerability.
Where can I find more information about CVE-2022-23105?
You can find more information about CVE-2022-23105 in the advisory published by Jenkins at https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-1389.