CVE-2023-37945

2023-07-1215:52:48

jenkins

www.cve.org

jenkins

saml single sign on

unauthorized access

AI Score

4.8

Confidence

High

EPSS

0.001

Percentile

21.3%

JSON

A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 through 2.3.0 (both inclusive) allows attackers with Overall/Read permission to download a string representation of the current security realm.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Jenkins SAML Single Sign On(SSO) Plugin",
    "vendor": "Jenkins Project",
    "versions": [
      {
        "lessThanOrEqual": "2.3.0",
        "status": "affected",
        "version": "2.1.0",
        "versionType": "maven"
      }
    ]
  }
]