10196 matches found
CVE-2023-37943
Jenkins Active Directory Plugin 2.30 and earlier ignores the "Require TLS" and "StartTls" options and always performs the connection test to Active directory unencrypted, allowing attackers able to capture network traffic between the Jenkins controller and Active Directory servers to obtain Activ...
CVE-2023-37943
Jenkins Active Directory Plugin 2.30 and earlier ignores the "Require TLS" and "StartTls" options and always performs the connection test to Active directory unencrypted, allowing attackers able to capture network traffic between the Jenkins controller and Active Directory servers to obtain Activ...
Microsoft Releases Patches for 132 Vulnerabilities, Including 6 Under Active Attack
Microsoft on Tuesday released updates to address a total of 132 new security flaws spanning its software, including six zero-day flaws that it said have been actively exploited in the wild. Of the 132 vulnerabilities, nine are rated Critical, 122 are rated Important in severity, and one has been...
grafana: account takeover possible when using Azure AD OAuth
A flaw was found in Grafana, which validates Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique across Azure AD tenants, which enables Grafana account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant AzureAD OAuth...
Jenkins Plugin Active Directory 安全漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...
PT-2023-26191 · Jenkins · Jenkins Active Directory Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Active Directory Plugin versions 2.30 and earlier Description: The issue allows attackers to capture network traffic between the Jenkins controller and Active Directory servers, potentially obtaining Active Directory credentials. This...
CVE-2023-36871
Azure Active Directory Security Feature Bypass Vulnerability...
CVE-2023-36871
Azure Active Directory Security Feature Bypass Vulnerability...
CVE-2023-36871
Azure Active Directory Security Feature Bypass Vulnerability...
CVE-2023-35350
Windows Active Directory Certificate Services AD CS Remote Code Execution Vulnerability...
CVE-2023-35351
Windows Active Directory Certificate Services AD CS Remote Code Execution Vulnerability...
CVE-2023-35350
Windows Active Directory Certificate Services AD CS Remote Code Execution Vulnerability...
CVE-2023-35348
Active Directory Federation Service Security Feature Bypass Vulnerability...
CVE-2023-35351
Windows Active Directory Certificate Services AD CS Remote Code Execution Vulnerability...
CVE-2023-35348
Active Directory Federation Service Security Feature Bypass Vulnerability...
CVE-2023-35351
Windows Active Directory Certificate Services AD CS Remote Code Execution Vulnerability...
CVE-2023-35350
Windows Active Directory Certificate Services AD CS Remote Code Execution Vulnerability...
CVE-2023-32055
Active Template Library Elevation of Privilege Vulnerability...