Aller au contenu
Se connecter
7.5 Élevée

CVE-2025-64131 Jenkins SAML Plugin 4.583.vc68232f7018a_ and earlier does not implement a replay cache, allowing attackers able to…

Description

Jenkins SAML Plugin 4.583.vc68232f7018a_ and earlier does not implement a replay cache, allowing attackers able to obtain information about the SAML authentication flow between a user's web browser and Jenkins to replay those requests, authenticating to Jenkins as that user.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins SAML Plugin Versions non publiées

Autres CVE de Jenkins SAML Plugin

Les 3 CVE de Jenkins SAML Plugin →
CVE-2026-84668 Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity provider metadata file… 8.8 Élevée CVE-2021-21678 Jenkins SAML Plugin 2.0.7 and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target… Non notée
Suivre cette CVE