CVE-2024-52553
High
Description
Jenkins OpenId Connect Authentication Plugin 4.418.vccc7061f5b_6d and earlier does not invalidate the previous session on login.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Jenkins Openid Connect Authentication
PublishedNov 13, 2024
First seenNov 13, 2024
Weakness typeCWE-613CWE-613
How to fix
Update
- jenkins openid_connect_authentication4.421.v5422614eb_e0a or later
- org.jenkins-ci.plugins:oic-auth4.421.v5422614eb or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jenkins openid_connect_authentication | v < 4.421.v5422614eb_e0a | 4.421.v5422614eb_e0a |
| org.jenkins-ci.plugins:oic-authMaven | v < 4.421.v5422614eb | 4.421.v5422614eb |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.