Lucene search

Openshift Login Security Vulnerabilities - January

cve

CVE-2023-37946

Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the previous session on login.

8.8CVSS

8.6AI Score

0.002EPSS

2023-07-12 04:15 PM

cve

CVE-2023-37947

Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.

6.1CVSS

6.1AI Score

0.001EPSS

2023-07-12 04:15 PM