jenkins_azure_ad

0.3.3 and earlier

OTHER 1 CVE

179.vf6841393099e

OTHER 1 CVE

164.v5b48baa961d2

OTHER 1 CVE

1.1.2

SEMANTIC 1 CVE

378.380.v545b_1154b_3fb_

OTHER 1 CVE

unspecified

OTHER 3 CVEs

397.v907382dd9b_98

OTHER 1 CVE

303.va_91ef20ee49f

OTHER 1 CVE

CVE-2023-41935

Jenkins Azure AD Plugin 396.v86ce29279947 and earlier, except 378.380.v545b_1154b_3fb_, uses a non-constant time comparison function when checking whether the provided and expected CSRF protection nonce are equal, potentially allowing attackers to use statistical methods to obtain a valid nonce.

UNKNOWN Sep 06, 2023

CVE-2023-24426

Jenkins Azure AD Plugin 303.va_91ef20ee49f and earlier does not invalidate the previous session on login.

UNKNOWN Jan 24, 2023

CVE-2021-21679

Jenkins Azure AD Plugin 179.vf6841393099e and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins.

UNKNOWN Aug 31, 2021

CVE-2020-2119

Jenkins Azure AD Plugin 1.1.2 and earlier transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.

UNKNOWN Feb 12, 2020