Aller au contenu

Vulnérabilités de Jenkins project Jenkins OpenId Connect Authentication Plugin

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2025-24399 Jenkins OpenId Connect Authentication Plugin 4.452.v2849b_d3945fa_ and earlier, except 4.438.440.v3f5f201de5dc, treats… 8.8 Élevée 22 janv. 2025
CVE-2024-52553 Jenkins OpenId Connect Authentication Plugin 4.418.vccc7061f5b_6d and earlier does not invalidate the previous session… 8.8 Élevée 13 nov. 2024
CVE-2024-47807 Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a_1de8 and earlier does not check the `iss` (Issuer) claim of… 8.1 Élevée 2 oct. 2024
CVE-2024-47806 Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a_1de8 and earlier does not check the `aud` (Audience)… 8.1 Élevée 2 oct. 2024
CVE-2023-50771 Jenkins OpenId Connect Authentication Plugin 2.6 and earlier improperly determines that a redirect URL after login is… Non notée 13 déc. 2023
CVE-2023-50770 Jenkins OpenId Connect Authentication Plugin 2.6 and earlier stores a password of a local user account used as an… Non notée 13 déc. 2023
CVE-2023-24424 Jenkins OpenId Connect Authentication Plugin 2.4 and earlier does not invalidate the previous session on login 8.8 Élevée 24 janv. 2023
CVE-2019-1003021 An exposure of sensitive information vulnerability exists in Jenkins OpenId Connect Authentication Plugin 1.4 and… Non notée 6 févr. 2019

Autres produits Jenkins project