Known vulnerabilities in OpenId Connect Authentication

Vendor: Jenkins
Software: OpenId Connect Authentication
Software CPE: cpe:2.3:a:jenkins:openid_connect_authentication:*:*:*:*:*:*:*:*
Website: https://jenkins.io/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenId Connect Authentication OpenId Connect Authentication is affected by 7 known vulnerabilities: 4 high, 1 medium, 2 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103263 - Improper Handling of Case Sensitivity
CVE-2025-24399		 CWE-178 Medium
No
No
 4.453.v4d7765c854f4 23.01.2025 SB2025012332
#VU100592 - Session Fixation
CVE-2024-52553		 CWE-384 High
No
No
 4.421.v5422614eb_e0a_ 18.11.2024 SB2024111831
#VU98068 - Improper Authentication
CVE-2024-47807		 CWE-287 High
No
No
 4.355.v3a_fb_fca_b_96d4 07.10.2024 SB2024100725
#VU98067 - Improper Authentication
CVE-2024-47806		 CWE-287 High
No
No
 4.355.v3a_fb_fca_b_96d4 07.10.2024 SB2024100725
#VU84456 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-50771		 CWE-601 Low
No
No
 - 15.12.2023 SB2023121516
#VU84455 - Storing Passwords in a Recoverable Format
CVE-2023-50770		 CWE-257 Low
No
No
 - 15.12.2023 SB2023121516
#VU71506 - Session Fixation
CVE-2023-24424		 CWE-384 High
No
No
 2.5 25.01.2023 SB2023012508