Jenkins OpenShift Login Plug 1.1.0.227: Session Not Invalidate on Re-login
CVE-2023-37946 Published on July 12, 2023
Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the previous session on login.
Products Associated with CVE-2023-37946
Want to know whenever a new CVE is published for Jenkins Openshift Login? stack.watch will email you.
Affected Versions
Jenkins Project Jenkins OpenShift Login Plugin:- Before and including 1.1.0.227.v27e08dfb_1a_20 is affected.
- Before and including 1.1.0.227.v27e08dfb_1a_20 is affected.
Exploit Probability
EPSS
0.08%
Percentile
23.77%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.