BDU%3A2023-04086 — Vulnetix

BDU%3A2023-04086 PUBLISHED CVSS 2.5999999046325684 LOW

Уязвимость плагина Jenkins SAML Single Sign On(SSO), связанная с отсутствием проверки сертификата SSL/TLS, позволяющая нарушителю раскрыть защищаемую информацию

Risk Scores

CVSS 2.0

2.5999999046325684

Affected Products

Vendor	Product	Versions
Jenkins	SAML Single Sign On
Jenkins Project	Jenkins SAML Single Sign On(SSO) Plugin	0

Timeline

May 16, 2023 CVE Published
Jul 26, 2023 CVE Updated
Jan 23, 2025 PoC Published

References

https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3001202 url
https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3001%20(2 advisory
Jenkins Security Advisory 2023-05-16 vendor-advisory

Open in Interactive Console →