CVE-2017-2649 - AskarLabs CVE Database

CVE-2017-2649

Vendor Jenkins Project

Product Active Directory Jenkins plugin

Weakness CWE-295

Published July 27, 2018

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

It was found that the Active Directory Plugin for Jenkins up to and including version 2.2 did not verify certificates of the Active Directory server, thereby enabling Man-in-the-Middle attacks.

Key dates

02Disclosure timeline

July 27, 2018 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-2649 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/295.html

Related vulnerabilities

04Related CVE

CVE-2026-53475 Assisted-migration-agent: tls verification disabled on all vcenter connections CVE-2026-41119 CVE-2026-42790 nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification CVE-2026-49267 Apache Airflow: No certificate validation on SMTP STARTTLS connections CVE-2026-45170 Idira Privilege Cloud Connector: Potential Security Bypass due to Incomplete TLS Certificate Validation