Vulners
Lucene search
3 matches found
CVE-2023-24424
Jenkins OpenId Connect Authentication Plugin 2.4 and earlier does not invalidate the previous session on login...
8.8CVSS8.8AI score
Exploits0References1
CVE-2023-24424
CVE-2023-24424 affects the Jenkins OpenId Connect Authentication Plugin (versions 2.4 and earlier). The vulnerability arises because the plugin does not invalidate an existing session on login, enabling potential unauthorized access via social engineering or session fixation. Reported impact is h...
8.8CVSS8.6AI score0.0118EPSS
Exploits0References1Affected Software1
CVE-2023-24424
Jenkins OpenId Connect Authentication Plugin 2.4 and earlier does not invalidate the previous session on login...
7.1AI score0.0118EPSS
Exploits0References1
20