Azure Ad Security Vulnerabilities and Issues — Azure Ad CVE List

Lucene search

JenkinsAzure Ad

3 matches found

CVE•added 2023/01/26 9:18 p.m.•72 views

CVE-2023-24426

Jenkins Azure AD Plugin 303.va_91ef20ee49f and earlier does not invalidate the previous session on login.

8.8CVSS8.5AI score0.00206EPSS

CVE•added 2021/08/31 2:15 p.m.•59 views

CVE-2021-21679

Jenkins Azure AD Plugin 179.vf6841393099e and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins.

8.8CVSS8.6AI score0.00017EPSS

CVE•added 2019/04/30 1:29 p.m.•45 views

CVE-2019-10318

Jenkins Azure AD Plugin 0.3.3 and earlier stored the client secret unencrypted in the global config.xml configuration file on the Jenkins master where it could be viewed by users with access to the master file system.

8.8CVSS8.5AI score0.0008EPSS