CVE-2022-23105

Description

Jenkins Active Directory Plugin 2.25 and earlier does not encrypt the transmission of data between the Jenkins controller and Active Directory servers in most configurations.

CVSS Version 3.1

nvd

CVE ID: CVE-2022-23105
Base Score: 6.5
Base Severity: MEDIUM
Vector String:CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Impact Score: 3.6
Exploitability Score: 2.8

CVSS Version 2.0

nvd

CVE ID: CVE-2022-23105
Base Score: 2.9
Base Severity: LOW
Vector String:AV:A/AC:M/Au:N/C:P/I:N/A:N

Refrence: NVD