Executive brief
Session fixation vulnerability in Jenkins OpenId Connect Authentication Plugin
Affected products
- Maven org.jenkins-ci.plugins:oic-auth
Junglewise Threat Intelligence
CVE-2023-24424: Session fixation vulnerability in Jenkins OpenId Connect Authentication Plugin
CVE-2023-24424 · Severity: low · CVSS 3.1 · Published 2023-01-26
Technologies: org.jenkins-ci.plugins:oic-auth (Maven). Vendors: Maven.
Related threats
- Improper handling of case sensitivity in Jenkins OpenId Connect Authentication Plugin
- Session fixation vulnerability in Jenkins OpenId Connect Authentication Plugin
- Jenkins OpenId Connect Authentication Plugin lacks audience claim validation
- Jenkins OpenId Connect Authentication Plugin lacks issuer claim validation
- Open redirect vulnerability in Jenkins OpenId Connect Authentication Plugin