Aller au contenu

Vulnérabilités connues pour Jenkins project Jenkins SAML Single Sign On(SSO) Plugin

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2023-37945 A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 through 2.3.0 (both inclusive) allows… Non notée 12 juil. 2023
CVE-2023-32996 A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.0.0 and earlier allows attackers with… 4.3 Moyenne 16 mai 2023
CVE-2023-32995 A cross-site request forgery (CSRF) vulnerability in Jenkins SAML Single Sign On(SSO) Plugin 2.0.0 and earlier allows… 8.8 Élevée 16 mai 2023
CVE-2023-32994 Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 and earlier unconditionally disables SSL/TLS certificate validation for… 3.7 Faible 16 mai 2023
CVE-2023-32993 Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier does not perform hostname validation when connecting to… 4.8 Moyenne 16 mai 2023
CVE-2023-32992 Missing permission checks in Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier allow attackers with Overall/Read… 8.8 Élevée 16 mai 2023
CVE-2023-32991 A cross-site request forgery (CSRF) vulnerability in Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier allows… 8.8 Élevée 16 mai 2023

Autres produits Jenkins project