Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2019/01/16 12:00 a.m.•18 views

Deleting a user in an external security realm did not invalidate their session or 'Remember me' cookie

When using an external security realm such as LDAP or Active Directory, deleting a user from the security realm does not result in the user losing access to Jenkins. While deleting the user record from Jenkins did invalidate the 'Remember me' cookie, there was no way to invalidate active sessions...

7.2CVSS6.3AI score0.01619EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder