Executive brief
Jenkins WSO2 Oauth Plugin Fails to Properly Authenticate User Credentials
Affected products
- Maven org.jenkins-ci.plugins:wso2id-oauth
Junglewise Threat Intelligence
CVE-2025-47889: Jenkins WSO2 Oauth Plugin Fails to Properly Authenticate User Credentials
CVE-2025-47889 · Severity: low · CVSS 3.1 · Published 2025-05-14
Technologies: org.jenkins-ci.plugins:wso2id-oauth (Maven). Vendors: Maven.
Related threats
- Jenkins WSO2 Oauth Plugin Session Fixation vulnerability
- Jenkins WSO2 Oauth Plugin cross-site request forgery vulnerability
- Jenkins WSO2 Oauth Plugin does not mask the WSO2 Oauth client secret on the global configuration form
- Jenkins WSO2 Oauth Plugin stores WSO2 Oauth client secret unencrypted in global config.xml file on Jenkins controller