medium4.3
CVE-2020-2302
A missing permission check in Jenkins Active Directory Plugin 2.19 and earlier allows attackers with Overall/Read permission to access the domain health check …
Impact
A missing permission check in Jenkins Active Directory Plugin 2.19 and earlier allows attackers with Overall/Read permission to access the domain health check diagnostic page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Active Directory | through 2.19 |