description: A cross-site request forgery (CSRF) vulnerability in Jenkins LDAP Plugin allows attackers to connect to an attacker-specified LDAP server using attacker-specified credentials.
affected:
{
defaultStatus: affected
product: Jenkins LDAP Plugin
vendor: Jenkins Project
versions:
lessThan: *, status: unaffected, version: 676.vfa_64cf6b_b_002, versionType: maven
lessThan: 671.*, status: unaffected, version: 671.673.vc045dcdd856b_, versionType: maven
lessThan: 2.10.*, status: unaffected, version: 2.10.1, versionType: maven
}