Not rated
CVE-2015-5298 The Google Login Plugin (versions 1.0 and 1.1) allows malicious anonymous users to authenticate successfully against…
Description
The Google Login Plugin (versions 1.0 and 1.1) allows malicious anonymous users to authenticate successfully against Jenkins instances that are supposed to be locked down to a particular Google Apps domain through client-side request modification.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Google Login Plugin | Versions not published |