[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fAlrj1uEhbVgwV_DD5GJlmiLFryaWnWwlsy7Z0SZftaM":3,"g5a-risk:CVE-2023-37943":102},{"success":4,"data":5,"meta":99},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":26,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":38,"references":39,"referencesCount":51,"weaknesses":52,"weaknessesCount":38,"isActivelyExploited":61,"cisaInfo":26,"otxData":26,"relatedBlogPosts":62,"seoMetadata":63,"configurations":88,"relatedVendorCves":97,"notableEvents":98},"CVE-2023-37943","What is CVE-2023-37943?","Jenkins Active Directory Plugin 2.30 and earlier ignores the \"Require TLS\" and \"StartTls\" options and always performs the connection test to Active directory unencrypted, allowing attackers able to capture network traffic between the Jenkins controller and Active Directory servers to obtain Active Directory credentials.","Jenkins Active Directory Plugin 2.30 and earlier ignores the \"Require TLS\" and \"StartTls\" options and always performs the connection test to Active directory...","2023-07-12T16:15:13.063","2023-07-20T01:46:27.617",5.9,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","HIGH","NONE","UNCHANGED","MEDIUM",null,2.2,3.6,0.00459,[29,29,29,29,29,29,29],"Medium",[33],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"jenkins","active_directory","*","cpe:2.3:a:jenkins:active_directory:*:*:*:*:*:jenkins:*:*",1,[40,46],{"url":41,"source":42,"tags":43},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2023\u002F07\u002F12\u002F2","Openwall",[44,45],"Mailing List","Third Party Advisory",{"url":47,"source":48,"tags":49},"https:\u002F\u002Fwww.jenkins.io\u002Fsecurity\u002Fadvisory\u002F2023-07-12\u002F#SECURITY-3059","Jenkins",[50],"Vendor Advisory",2,[53],{"id":54,"name":55,"description":56,"extendedDescription":57,"status":58,"abstraction":59,"structure":60},"CWE-311","Missing Encryption of Sensitive Data","The product does not encrypt sensitive or critical information before storage or transmission.","The lack of proper data encryption passes up the guarantees of confidentiality, integrity, and accountability that properly implemented encryption conveys.","Draft","Class","Simple",false,[],{"title":64,"metaDescription":65,"keywords":66,"canonicalUrl":67,"structuredData":68},"What is CVE-2023-37943? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-37943, a medium severity cyber security vulnerability from 2023. Jenkins Active Directory Plugin 2.30 and earlier ignores ...","CVE-2023-37943, CVE-2023-37943 vulnerability, CVE-2023-37943 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, jenkins security, active_directory vulnerability","\u002Fwhat-is\u002Fcve-2023-37943",{"@context":69,"@type":70,"headline":64,"description":65,"datePublished":10,"dateModified":11,"author":71,"publisher":75,"about":79,"mainEntityOfPage":83,"articleSection":86,"keywords":87},"https:\u002F\u002Fschema.org","TechArticle",{"@type":72,"name":73,"url":74},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":72,"name":73,"url":74,"logo":76},{"@type":77,"url":78},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":80,"name":6,"description":81,"additionalType":82},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":84,"@id":85},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-37943","Cybersecurity","CVE-2023-37943, CVE-2023-37943 vulnerability, CVE-2023-37943 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[89],{"Operator":26,"Negate":26,"Nodes":90},[91],{"Operator":92,"Negate":26,"CPEMatch":93},"OR",[94],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":95,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":96},"FDD3FB1A-224D-4829-A9E0-B2944179F1FD","2.30",[],[],{"lastModified":11,"cacheTime":100,"version":101},1792353329637,"2.0",{"score":103,"band":104,"action":105,"scoredAt":106},20,"Low","Monitor","2026-10-16T06:58:36.195699+00:00"]