Jenkins Saml Single Sign Onsso Plugin (Jenkins Project) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-07-12. Vendor: Jenkins Project.

CVEs of Jenkins Saml Single Sign Onsso Plugin

• CVE-2023-37945 - CVSS 4.3 (medium), 2023-07-12: A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 through 2.3.0 (both inclusive) allows attackers with Overall/Read permission to…
• CVE-2023-32996 - CVSS 4.3 (medium), 2023-05-16: A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.0.0 and earlier allows attackers with Overall/Read permission to send an HTTP POST…
• CVE-2023-32993 - CVSS 4.8 (medium), 2023-05-16: Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier does not perform hostname validation when connecting to miniOrange or the configured IdP to retrieve…
• CVE-2023-32992 - CVSS 8.8 (high), 2023-05-16: Missing permission checks in Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier allow attackers with Overall/Read permission to send an HTTP request to…
• CVE-2023-32995 - CVSS 8.8 (high), 2023-05-16: A cross-site request forgery (CSRF) vulnerability in Jenkins SAML Single Sign On(SSO) Plugin 2.0.0 and earlier allows attackers to send an HTTP POST request…
• CVE-2023-32991 - CVSS 8.8 (high), 2023-05-16: A cross-site request forgery (CSRF) vulnerability in Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier allows attackers to send an HTTP request to an…
• CVE-2023-32994 - CVSS 3.7 (low), 2023-05-16: Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 and earlier unconditionally disables SSL/TLS certificate validation for connections to miniOrange or the…