CVE-2023-37946 Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the previous session on login

Description

Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the previous session on login.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins OpenShift Login Plugin	Versions not published
jenkins_openshift_login_plugin	Versions not published

Other CVEs of Jenkins OpenShift Login Plugin

The 2 CVEs of Jenkins OpenShift Login Plugin →

CVE-2023-37947 Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after… Not rated