jenkinsci/azure-ad-plugin · Security
Insufficient Session Expiration in Jenkins Azure AD Plugin
- GHSA ID
- GHSA-939x-6mwj-96r2
- CVE ID
- CVE-2023-24426
- Severity
- high
- Published
- Updated
- CVSS
- 8.8 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS v3
- 8.8 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Jenkins Azure AD Plugin 303.va_91ef20ee49f and earlier does not invalidate the previous session on login.
CWEs
- CWE-613 · Insufficient Session Expiration