Not rated

CVE-2023-37947 Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after…

Description

Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins OpenShift Login Plugin	Versions not published
jenkins_openshift_login_plugin	Versions not published

The 2 CVEs of Jenkins OpenShift Login Plugin →

CVE-2023-37946 Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the previous session on login Not rated

Do you use Jenkins OpenShift Login Plugin?

Track this CVE Watch Jenkins OpenShift Login Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2023-37947

Timeline

Published July 12, 2023
Last modified November 7, 2024

References

Jenkins Security Advisory 2023-07-12 www.jenkins.io
www.openwall.com www.openwall.com

Track this CVE

CVE-2023-37947 Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after…

Description

Affected products and versions

Other CVEs of Jenkins OpenShift Login Plugin