CVE-2017-2649

Name of the Vulnerable Software and Affected Versions: Active Directory Plugin for Jenkins versions up to and including 2.2

Description: The issue allows for Man-in-the-Middle attacks due to the lack of certificate verification of the Active Directory server.

Recommendations: For versions up to and including 2.2, update to a version that verifies certificates of the Active Directory server to prevent Man-in-the-Middle attacks.