CVE-2015-5298

2022-07-0718:35:40

CWE-287

redhat

www.cve.org

0.001 Low

EPSS

Percentile

22.0%

JSON

The Google Login Plugin (versions 1.0 and 1.1) allows malicious anonymous users to authenticate successfully against Jenkins instances that are supposed to be locked down to a particular Google Apps domain through client-side request modification.

CNA Affected

[
  {
    "product": "Jenkins Google Login Plugin",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Jenkins Google Login Plugin 1.0 and 1.1"
      }
    ]
  }
]