Aller au contenu
Se connecter
8.8 Élevée

CVE-2026-84672 Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra group permissions…

Description

Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra group permissions using both the group's unique object ID and its display name, allowing attackers who can create an Entra group with a colliding display name to gain the permissions configured for a privileged group.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins Microsoft Entra ID (previously Azure AD) Plugin Versions non publiées

Autres CVE de Jenkins Microsoft Entra ID (previously Azure AD) Plugin

Les 2 CVE de Jenkins Microsoft Entra ID (previously Azure AD) Plugin →
CVE-2026-42525 Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL… 4.3 Moyenne
Suivre cette CVE