Missing permission check in Jenkins Active Directory Plugin allows accessing domain health check page
Jenkins Active Directory Plugin 2.19 and earlier does not perform a permission check in an HTTP endpoint.This allows attackers with Overall/Read permission to access the domain health check diagnostic page.Jenkins Active Directory Plugin 2.20 requires Overall/Administer permission to access the domain health check diagnostic page.