CVE Catalog
CVE-2023-37945
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.37%
29th percentile - higher than 29% of all known CVEs
Summary
A missing permission check in Jenkins SAML Single Sign On (SSO) Plugin versions 2.1.0 through 2.3.0 allows attackers with Overall/Read permission to download a string representation of the current security realm.
Risk Assessment
Attackers may gain access to sensitive information regarding security configuration, potentially leading to further attacks on the system.
Recommendation
It is recommended to update the SAML SSO plugin to the latest version to mitigate the security vulnerability.
Original NVD description (English source)
A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 through 2.3.0 (both inclusive) allows attackers with Overall/Read permission to download a string representation of the current security realm.