Executive brief
Password stored in a recoverable format by Jenkins OpenId Connect Authentication Plugin
Affected products
- Maven org.jenkins-ci.plugins:oic-auth
Junglewise Threat Intelligence
CVE-2023-50770: Password stored in a recoverable format by Jenkins OpenId Connect Authentication Plugin
CVE-2023-50770 · Severity: low · CVSS 3.1 · Published 2023-12-13
Technologies: org.jenkins-ci.plugins:oic-auth (Maven). Vendors: Maven.
Related threats
- Improper handling of case sensitivity in Jenkins OpenId Connect Authentication Plugin
- Session fixation vulnerability in Jenkins OpenId Connect Authentication Plugin
- Jenkins OpenId Connect Authentication Plugin lacks audience claim validation
- Jenkins OpenId Connect Authentication Plugin lacks issuer claim validation
- Open redirect vulnerability in Jenkins OpenId Connect Authentication Plugin