CVE-2023-32997 Jenkins CAS Plugin 1.6.2 and earlier does not invalidate the previous session on login

Description

Jenkins CAS Plugin 1.6.2 and earlier does not invalidate the previous session on login.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins CAS Plugin 1.6	earliest → 1.6.2	No fix stated

Other CVEs of Jenkins CAS Plugin

The 2 CVEs of Jenkins CAS Plugin →

CVE-2021-21673 Jenkins CAS Plugin 1.6.0 and earlier improperly determines that a redirect URL after login is legitimately pointing to… Not rated