Описание
Jenkins SAML Plugin Session Fixation vulnerability
A session fixation vulnerability exists in Jenkins SAML Plugin 1.0.6 and earlier in SamlSecurityRealm.java that allows unauthorized attackers to impersonate another users if they can control the pre-authentication session. SAML Plugin 1.0.7 invalidates the previous session during login and creates a new one.
Пакеты
Наименование
org.jenkins-ci.plugins:saml
maven
Затронутые версииВерсия исправления
<= 1.0.6
1.0.7
Связанные уязвимости
CVSS3: 5.9
nvd
больше 7 лет назад
A session fixation vulnerability exists in Jenkins SAML Plugin 1.0.6 and earlier in SamlSecurityRealm.java that allows unauthorized attackers to impersonate another users if they can control the pre-authentication session.