Executive brief
Jenkins Gitlab Authentication Plugin vulnerable to Session Fixation
Affected products
- Maven org.jenkins-ci.plugins:gitlab-oauth
Junglewise Threat Intelligence
CVE-2019-10371: Jenkins Gitlab Authentication Plugin vulnerable to Session Fixation
CVE-2019-10371 · Severity: low · CVSS 3.1 · Published 2022-05-24
Technologies: org.jenkins-ci.plugins:gitlab-oauth (Maven). Vendors: Maven.
Related threats
- CSRF vulnerability in GitLab Authentication Plugin
- Improper authorization of users and groups with the same base name in Jenkins GitLab Authentication Plugin
- Jenkins Gitlab Authentication Plugin Open Redirect vulnerability
- Client Secret stored in plain text by Jenkins GitLab Authentication Plugin
- Open redirect vulnerability in Jenkins GitLab Authentication Plugin