Executive brief
Jenkins SAML Single Sign On(SSO) Plugin unconditionally disables SSL/TLS certificate validation
Affected products
- Maven io.jenkins.plugins:miniorange-saml-sp
Junglewise Threat Intelligence
CVE-2023-32994: Jenkins SAML Single Sign On(SSO) Plugin unconditionally disables SSL/TLS certificate validation
CVE-2023-32994 · Severity: low · CVSS 3.1 · Published 2023-05-16
Technologies: io.jenkins.plugins:miniorange-saml-sp (Maven). Vendors: Maven.
Related threats
- Jenkins SAML Single Sign On(SSO) Plugin missing permission check
- Jenkins SAML Single Sign On(SSO) Plugin missing permission checks
- Jenkins SAML Single Sign On(SSO) Plugin Cross-Site Request Forgery vulnerability
- Jenkins SAML Single Sign On(SSO) Plugin missing hostname validation
- Jenkins SAML Single Sign On(SSO) Plugin missing permission checks