CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2025/05/23 3:51 a.m.•13 views

CVE-2023-32997

Jenkins CAS Plugin 1.6.2 and earlier does not invalidate the previous session on login...

8.8CVSS6.8AI score0.00794EPSS

SaveExploits0References1

OSV•added 2023/05/16 5:15 p.m.•15 views

CVE-2023-32997

Jenkins CAS Plugin 1.6.2 and earlier does not invalidate the previous session on login...

8.8CVSS7AI score

SaveExploits0References1

CVE•added 2023/05/16 4:0 p.m.•70 views

CVE-2023-32997

The CVE-2023-32997 entry concerns the Jenkins CAS Plugin (versions 1.6.2 and earlier) that does not invalidate the existing session on login, enabling a session fixation risk. Multiple connected sources corroborate this behavior and describe it as allowing an attacker to potentially gain administ...

8.8CVSS8.6AI score0.00794EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2023/05/16 4:0 p.m.•21 views

CVE-2023-32997

Jenkins CAS Plugin 1.6.2 and earlier does not invalidate the previous session on login...

9AI score0.00794EPSS

SaveExploits0References1

Vulnrichment•added 2023/05/16 4:0 p.m.•10 views

CVE-2023-32997

Jenkins CAS Plugin 1.6.2 and earlier does not invalidate the previous session on login...

8.7AI score0.00794EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by