LDAP is configured to use an unencrypted channel

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_47
Category	System Configuration
Severity	MEDIUM

Impact

The LDAP protocol is used in the Jenkins instance for the authentication of users. This instance is communicating with the remote LDAP server over an unencrypted channel. This allows attackers to perform a Man In The Middle attack and intercept the LDAP traffic, which may lead to bypassing the authentication mechanism and gaining control over the Jenkins instance.

Recommended Solution - Buildtime

Encrypt all LDAP data in transit flowing to and from the Jenkins instance, by using the secure LDAPS protocol.