CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-1003009

An improper certificate validation vulnerability exists in Jenkins Active Directory Plugin 2.10 and earlier in src/main/java/hudson/plugins/active_directory/ActiveDirectoryDomain.java, src/main/java/hudson/plugins/active_directory/ActiveDirectorySecurityRealm.java, src/main/java/hudson/plugins/active_directory/ActiveDirectoryUnixAuthenticationProvider.java that allows attackers to impersonate the Active Directory server Jenkins connects to for authentication if Jenkins is configured to use StartTLS.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 4.8%

CVSS Severity

CVSS v3 Score 7.4

CVSS v2 Score 5.8

References

Products affected by CVE-2019-1003009

Jenkins » Active Directory » Version: 1.0

cpe:2.3:a:jenkins:active_directory:1.0
Jenkins » Active Directory » Version: 1.1

cpe:2.3:a:jenkins:active_directory:1.1
Jenkins » Active Directory » Version: 1.10

cpe:2.3:a:jenkins:active_directory:1.10
Jenkins » Active Directory » Version: 1.11

cpe:2.3:a:jenkins:active_directory:1.11
Jenkins » Active Directory » Version: 1.12

cpe:2.3:a:jenkins:active_directory:1.12
Jenkins » Active Directory » Version: 1.13

cpe:2.3:a:jenkins:active_directory:1.13
Jenkins » Active Directory » Version: 1.14

cpe:2.3:a:jenkins:active_directory:1.14
Jenkins » Active Directory » Version: 1.15

cpe:2.3:a:jenkins:active_directory:1.15
Jenkins » Active Directory » Version: 1.16

cpe:2.3:a:jenkins:active_directory:1.16
Jenkins » Active Directory » Version: 1.17

cpe:2.3:a:jenkins:active_directory:1.17
Jenkins » Active Directory » Version: 1.18

cpe:2.3:a:jenkins:active_directory:1.18
Jenkins » Active Directory » Version: 1.19

cpe:2.3:a:jenkins:active_directory:1.19
Jenkins » Active Directory » Version: 1.2

cpe:2.3:a:jenkins:active_directory:1.2
Jenkins » Active Directory » Version: 1.20

cpe:2.3:a:jenkins:active_directory:1.20
Jenkins » Active Directory » Version: 1.21

cpe:2.3:a:jenkins:active_directory:1.21
Jenkins » Active Directory » Version: 1.22

cpe:2.3:a:jenkins:active_directory:1.22
Jenkins » Active Directory » Version: 1.23

cpe:2.3:a:jenkins:active_directory:1.23
Jenkins » Active Directory » Version: 1.24

cpe:2.3:a:jenkins:active_directory:1.24
Jenkins » Active Directory » Version: 1.25

cpe:2.3:a:jenkins:active_directory:1.25
Jenkins » Active Directory » Version: 1.26

cpe:2.3:a:jenkins:active_directory:1.26
Jenkins » Active Directory » Version: 1.27

cpe:2.3:a:jenkins:active_directory:1.27
Jenkins » Active Directory » Version: 1.28

cpe:2.3:a:jenkins:active_directory:1.28
Jenkins » Active Directory » Version: 1.29

cpe:2.3:a:jenkins:active_directory:1.29
Jenkins » Active Directory » Version: 1.3

cpe:2.3:a:jenkins:active_directory:1.3
Jenkins » Active Directory » Version: 1.30

cpe:2.3:a:jenkins:active_directory:1.30
Jenkins » Active Directory » Version: 1.31

cpe:2.3:a:jenkins:active_directory:1.31
Jenkins » Active Directory » Version: 1.32

cpe:2.3:a:jenkins:active_directory:1.32
Jenkins » Active Directory » Version: 1.33

cpe:2.3:a:jenkins:active_directory:1.33
Jenkins » Active Directory » Version: 1.34

cpe:2.3:a:jenkins:active_directory:1.34
Jenkins » Active Directory » Version: 1.35

cpe:2.3:a:jenkins:active_directory:1.35
Jenkins » Active Directory » Version: 1.36

cpe:2.3:a:jenkins:active_directory:1.36
Jenkins » Active Directory » Version: 1.37

cpe:2.3:a:jenkins:active_directory:1.37
Jenkins » Active Directory » Version: 1.38

cpe:2.3:a:jenkins:active_directory:1.38
Jenkins » Active Directory » Version: 1.39

cpe:2.3:a:jenkins:active_directory:1.39
Jenkins » Active Directory » Version: 1.4

cpe:2.3:a:jenkins:active_directory:1.4
Jenkins » Active Directory » Version: 1.40

cpe:2.3:a:jenkins:active_directory:1.40
Jenkins » Active Directory » Version: 1.41

cpe:2.3:a:jenkins:active_directory:1.41
Jenkins » Active Directory » Version: 1.42

cpe:2.3:a:jenkins:active_directory:1.42
Jenkins » Active Directory » Version: 1.43

cpe:2.3:a:jenkins:active_directory:1.43
Jenkins » Active Directory » Version: 1.44

cpe:2.3:a:jenkins:active_directory:1.44
Jenkins » Active Directory » Version: 1.45

cpe:2.3:a:jenkins:active_directory:1.45
Jenkins » Active Directory » Version: 1.46

cpe:2.3:a:jenkins:active_directory:1.46
Jenkins » Active Directory » Version: 1.47

cpe:2.3:a:jenkins:active_directory:1.47
Jenkins » Active Directory » Version: 1.48

cpe:2.3:a:jenkins:active_directory:1.48
Jenkins » Active Directory » Version: 1.49

cpe:2.3:a:jenkins:active_directory:1.49
Jenkins » Active Directory » Version: 1.5

cpe:2.3:a:jenkins:active_directory:1.5
Jenkins » Active Directory » Version: 1.6

cpe:2.3:a:jenkins:active_directory:1.6
Jenkins » Active Directory » Version: 1.7

cpe:2.3:a:jenkins:active_directory:1.7
Jenkins » Active Directory » Version: 1.8

cpe:2.3:a:jenkins:active_directory:1.8
Jenkins » Active Directory » Version: 1.9

cpe:2.3:a:jenkins:active_directory:1.9
Jenkins » Active Directory » Version: 2.0

cpe:2.3:a:jenkins:active_directory:2.0
Jenkins » Active Directory » Version: 2.1

cpe:2.3:a:jenkins:active_directory:2.1
Jenkins » Active Directory » Version: 2.10

cpe:2.3:a:jenkins:active_directory:2.10
Jenkins » Active Directory » Version: 2.2

cpe:2.3:a:jenkins:active_directory:2.2
Jenkins » Active Directory » Version: 2.3

cpe:2.3:a:jenkins:active_directory:2.3
Jenkins » Active Directory » Version: 2.4

cpe:2.3:a:jenkins:active_directory:2.4
Jenkins » Active Directory » Version: 2.5

cpe:2.3:a:jenkins:active_directory:2.5
Jenkins » Active Directory » Version: 2.6

cpe:2.3:a:jenkins:active_directory:2.6
Jenkins » Active Directory » Version: 2.7

cpe:2.3:a:jenkins:active_directory:2.7
Jenkins » Active Directory » Version: 2.8

cpe:2.3:a:jenkins:active_directory:2.8
Jenkins » Active Directory » Version: 2.9

cpe:2.3:a:jenkins:active_directory:2.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-1003009

Products

Pricing

Contact Us