Executive brief
Jenkins SAML Single Sign On(SSO) Plugin missing permission check
Affected products
- Maven io.jenkins.plugins:miniorange-saml-sp
Junglewise Threat Intelligence
CVE-2023-37945: Jenkins SAML Single Sign On(SSO) Plugin missing permission check
CVE-2023-37945 · Severity: low · CVSS 3.1 · Published 2023-07-12
Technologies: io.jenkins.plugins:miniorange-saml-sp (Maven). Vendors: Maven.
Related threats
- Jenkins SAML Single Sign On(SSO) Plugin missing permission checks
- Jenkins SAML Single Sign On(SSO) Plugin Cross-Site Request Forgery vulnerability
- Jenkins SAML Single Sign On(SSO) Plugin unconditionally disables SSL/TLS certificate validation
- Jenkins SAML Single Sign On(SSO) Plugin missing hostname validation
- Jenkins SAML Single Sign On(SSO) Plugin missing permission checks