CVE-2023-24444

Critical

Jenkins OpenID Plugin 2.4 and earlier does not invalidate the previous session on login.

jenkins·CWE-404·Published 2023-01-24

CVSS

9.8

EPSS

0.01

KEV

Exploits

cve.orgen

88 chars

Jenkins OpenID Plugin 2.4 and earlier does not invalidate the previous session on login.

NVDen

88 chars

Jenkins OpenID Plugin 2.4 and earlier does not invalidate the previous session on login.

OSV.deven

88 chars

Jenkins OpenID Plugin 2.4 and earlier does not invalidate the previous session on login.

GHSAen

88 chars

Jenkins OpenID Plugin 2.4 and earlier does not invalidate the previous session on login.

NVDes

122 chars

El complemento OpenID de Jenkins en su versión anterior 2.4 y anteriores no invalida la sesión anterior al iniciar sesión.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	9.8	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H