Skip to content
fr Sign in
7.5 High

CVE-2025-64131 Jenkins SAML Plugin 4.583.vc68232f7018a_ and earlier does not implement a replay cache, allowing attackers able to…

Description

Jenkins SAML Plugin 4.583.vc68232f7018a_ and earlier does not implement a replay cache, allowing attackers able to obtain information about the SAML authentication flow between a user's web browser and Jenkins to replay those requests, authenticating to Jenkins as that user.

Affected products and versions

Product Affected versions Fixed in
Jenkins SAML Plugin Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Jenkins SAML Plugin

The 3 CVEs of Jenkins SAML Plugin →
CVE-2026-84668 Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity provider metadata file… 8.8 High CVE-2021-21678 Jenkins SAML Plugin 2.0.7 and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target… Not rated
Track this CVE