CVE-2022-23105
Jenkins Active Directory Plugin 2.25 and earlier does not encrypt the transmission of data between the Jenkins controller and Active Directory servers in most configurations.
Date published : 2022-01-12
https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-1389