CVE-2017-2649

CVE-2017-2649 describes a critical vulnerability in the Jenkins Active Directory Plugin, affecting versions up to and including 2.2, where the plugin failed to validate Active Directory server certificates. This oversight enables Man-in-the-Middle (MitM) attacks, allowing an attacker to intercept and potentially manipulate communications. With a CVSS score of 8.1 (High), the vulnerability is easily exploitable over the network with high impact on confidentiality, integrity, and availability, despite requiring high attack complexity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.