CVE-2023-37945

2023-07-1215:52:48

jenkins

www.cve.org

jenkins

saml single sign on

unauthorized access

4.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.0%

JSON

A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 through 2.3.0 (both inclusive) allows attackers with Overall/Read permission to download a string representation of the current security realm.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Jenkins SAML Single Sign On(SSO) Plugin",
    "vendor": "Jenkins Project",
    "versions": [
      {
        "lessThanOrEqual": "2.3.0",
        "status": "affected",
        "version": "2.1.0",
        "versionType": "maven"
      }
    ]
  }
]