Improper Authorization Vulnerability in Jenkins Crowd 2 Integration Plugin 2.0.0 and Earlier

CVE-2018-1000422 · MEDIUM Severity

AV:N/AC:L/AU:S/C:N/I:P/A:N

An improper authorization vulnerability exists in Jenkins Crowd 2 Integration Plugin 2.0.0 and earlier in CrowdSecurityRealm.java that allows attackers to have Jenkins perform a connection test, connecting to an attacker-specified server with attacker-specified credentials and connection settings.

Learn more about our Cis Benchmark Audit For Server Software.