Executive brief
Jenkins OpenId Connect Authentication Plugin lacks audience claim validation
Affected products
- Maven org.jenkins-ci.plugins:oic-auth
Junglewise Threat Intelligence
CVE-2024-47806: Jenkins OpenId Connect Authentication Plugin lacks audience claim validation
CVE-2024-47806 · Severity: low · CVSS 3.1 · Published 2024-10-02
Technologies: org.jenkins-ci.plugins:oic-auth (Maven). Vendors: Maven.
Related threats
- Improper handling of case sensitivity in Jenkins OpenId Connect Authentication Plugin
- Session fixation vulnerability in Jenkins OpenId Connect Authentication Plugin
- Jenkins OpenId Connect Authentication Plugin lacks issuer claim validation
- Open redirect vulnerability in Jenkins OpenId Connect Authentication Plugin
- Password stored in a recoverable format by Jenkins OpenId Connect Authentication Plugin