CVE Catalog
CVE-2023-37946
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.72%
49th percentile - higher than 49% of all known CVEs
Summary
Jenkins OpenShift Login Plugin version 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the previous session on login.
Risk Assessment
The lack of session invalidation may lead to unauthorized access to user accounts, posing a security risk to the organization.
Recommendation
It is recommended to update the plugin to the latest version to ensure previous sessions are invalidated upon login.
Other vulnerabilities in Jenkins OpenShift Login Plugin
Original NVD description (English source)
Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the previous session on login.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS