CVE-2023-24444 Jenkins OpenID Plugin 2.4 and earlier does not invalidate the previous session on login

Description

Jenkins OpenID Plugin 2.4 and earlier does not invalidate the previous session on login.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Jenkins openid Plugin 2.4	premières → 2.4	Pas de correctif indiqué

Autres CVE de Jenkins openid Plugin

Les 5 CVE de Jenkins openid Plugin →

CVE-2023-24445 Jenkins OpenID Plugin 2.4 and earlier improperly determines that a redirect URL after login is legitimately pointing… 6.1 Moyenne CVE-2023-24446 A cross-site request forgery (CSRF) vulnerability in Jenkins OpenID Plugin 2.4 and earlier allows attackers to trick… 8.8 Élevée CVE-2019-1003098 A cross-site request forgery vulnerability in Jenkins openid Plugin in the… Non notée CVE-2019-1003099 A missing permission check in Jenkins openid Plugin in the OpenIdSsoSecurityRealm.DescriptorImpl#doValidate form… Non notée