Skip to content
OpenAdvisories
High · 8.8 CVE-2023-24426 EUVD-2023-0418GHSA-939x-6mwj-96r2

Insufficient Session Expiration in Jenkins Azure AD Plugin

Published Jan 24, 2023 · Updated Apr 2, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Azure AD Plugin Package: org.jenkins-ci.plugins:azure-ad Category: Web / CMS Ecosystem: Maven

Description

Jenkins Azure AD Plugin 303.va_91ef20ee49f and earlier does not invalidate the previous session on login.

Affected products

VendorProductAffectedFixed
Jenkins Project Jenkins Azure AD Plugin unspecified – ≤ 303.va_91ef20ee49f —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:azure-ad <= 303.va — GHSA-939x-6mwj-96r2

Advisories 1

References