Executive brief
Session fixation vulnerability in Jenkins OpenId Connect Authentication Plugin
Affected products
- Maven org.jenkins-ci.plugins:oic-auth
Junglewise Threat Intelligence
CVE-2024-52553: Session fixation vulnerability in Jenkins OpenId Connect Authentication Plugin
CVE-2024-52553 · Severity: low · CVSS 3.1 · Published 2024-11-13
Technologies: org.jenkins-ci.plugins:oic-auth (Maven). Vendors: Maven.
Related threats
- Improper handling of case sensitivity in Jenkins OpenId Connect Authentication Plugin
- Jenkins OpenId Connect Authentication Plugin lacks audience claim validation
- Jenkins OpenId Connect Authentication Plugin lacks issuer claim validation
- Open redirect vulnerability in Jenkins OpenId Connect Authentication Plugin
- Password stored in a recoverable format by Jenkins OpenId Connect Authentication Plugin