Executive brief
Improper handling of case sensitivity in Jenkins OpenId Connect Authentication Plugin
Affected products
- Maven org.jenkins-ci.plugins:oic-auth
Junglewise Threat Intelligence
CVE-2025-24399: Improper handling of case sensitivity in Jenkins OpenId Connect Authentication Plugin
CVE-2025-24399 · Severity: low · CVSS 3.1 · Published 2025-01-22
Technologies: org.jenkins-ci.plugins:oic-auth (Maven). Vendors: Maven.
Related threats
- Session fixation vulnerability in Jenkins OpenId Connect Authentication Plugin
- Jenkins OpenId Connect Authentication Plugin lacks audience claim validation
- Jenkins OpenId Connect Authentication Plugin lacks issuer claim validation
- Open redirect vulnerability in Jenkins OpenId Connect Authentication Plugin
- Password stored in a recoverable format by Jenkins OpenId Connect Authentication Plugin