Login Request a demo
JO
Product
Jenkins OpenId Connect Authentication Plugin
by Jenkins project · last CVE Jan 22, 2025
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 4Medium 3Low 0
Severity
All severities7Critical0High4Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jenkins OpenId Connect Authentication Plugin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-50770
6.7
0%
Dec 13
Jenkins OpenId Connect Authentication Plugin 2.6 and earlier stores a password of a local user account used as an anti-lockout feature in a recoverable format, allowing attackers…
Affected: through 2.6
CVE-2023-50771
6.1
1%
Dec 13
Jenkins OpenId Connect Authentication Plugin 2.6 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to…
Affected: through 2.6
CVE-2019-1003021
4.3
1%
Feb 6
An exposure of sensitive information vulnerability exists in Jenkins OpenId Connect Authentication Plugin 1.4 and earlier in OicSecurityRealm/config.jelly that allows attackers…
Affected: 1.4 and earlier
Showing 3