Jenkins Azure Ad Plugin
Approved changes feed: RSS · Atom
cpe:2.3:a:jenkins_project:jenkins_azure_ad_plugin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Jenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462) |
|---|---|
| Product | Jenkins Azure Ad Plugin (10c935a8-d0c0-5607-b1f5-c152508144a6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-41935 |
not_vulnerable | 2026-06-08 06:11:07.444057 |
Details available
Jenkins Azure AD Plugin 396.v86ce29279947 and earlier, except 378.380.v545b_1154b_3fb_, uses a non-constant time comparison function when checking whether the provided and expected CSRF protection nonce are equal, potentially allowing attackers to use statistical methods to obtain a valid nonce.
Published: 2023-09-06T12:08:55.693Z
Updated: 2024-09-26T19:55:15.254Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24426 |
vulnerable | 2026-06-08 05:56:05.447079 |
Details available
Jenkins Azure AD Plugin 303.va_91ef20ee49f and earlier does not invalidate the previous session on login.
Published: 2023-01-24T00:00:00.000Z
Updated: 2025-04-02T14:08:32.895Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21679 |
vulnerable | 2026-06-08 05:29:13.119999 |
Details available
Jenkins Azure AD Plugin 179.vf6841393099e and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins.
Published: 2021-08-31T13:50:16.000Z
Updated: 2024-08-03T18:23:29.177Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-2119 |
vulnerable | 2026-06-08 05:24:58.927545 |
Details available
Jenkins Azure AD Plugin 1.1.2 and earlier transmits configured credentials in plain text as part of the global Jenkins configuration form, potentially resulting in their exposure.
Published: 2020-02-12T14:35:44.000Z
Updated: 2024-08-04T07:01:41.123Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10318 |
vulnerable | 2026-06-08 05:12:23.154469 |
Details available
Jenkins Azure AD Plugin 0.3.3 and earlier stored the client secret unencrypted in the global config.xml configuration file on the Jenkins master where it could be viewed by users with access to the master file system.
Published: 2019-04-30T12:25:18.000Z
Updated: 2024-08-04T22:17:20.469Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.