Jenkins Openshift Login Plugin CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2023-37947

Jenkins: Open redirect vulnerability in OpenShift Login Plugin

Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Products

Openshift Login Jenkins Openshift Login Plugin Ocp Tools

CVE-2023-37946

Jenkins: Session fixation vulnerability in OpenShift Login Plugin

Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the previous session on login.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Jenkins Jenkins Project Redhat

Products

Openshift Login Jenkins Openshift Login Plugin Ocp Tools

Page 1 of 1.