Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins OpenId Connect Authentication Plugin — Jenkins Security Advisory 2024-10-02 Clear all filters
TI-2024-32075 CVE-2024-47807 · GHSA-8pjw-fff6-3mjv

Improper authentication in Jenkins OpenId Connect Authentication Plugin

Priority LOW 38

Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a_1de8 and earlier does not check the `iss` (Issuer) claim of an ID Token, allowing attackers to subvert the authentication flow, potentially gaining administrat…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00632 Published 2024-10-02 Fixed in 4.355.v3a CWE-287
TI-2024-32074 CVE-2024-47806 · GHSA-49hx-9mm2-7675

Improper authentication in Jenkins OpenId Connect Authentication Plugin

Priority LOW 38

Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a_1de8 and earlier does not check the `aud` (Audience) claim of an ID Token, allowing attackers to subvert the authentication flow, potentially gaining administr…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00632 Published 2024-10-02 Fixed in 4.355.v3a CWE-287