GitHub Advisoryadvisory · Maven

GHSA-8pjw-fff6-3mjv Jenkins OpenId Connect Authentication Plugin lacks issuer claim validation

CRITICAL Published 2024-10-02 Modified 2024-10-02 Official page ↗
Aliases
CVE-2024-47807
Ecosystem
Maven
Packages
org.jenkins-ci.plugins:oic-auth
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-287
Reviewed
2024-10-02

Affected packages

• Maven org.jenkins-ci.plugins:oic-auth: < 4.355.v3a → fixed in 4.355.v3a

Description

Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a_1de8 and earlier does not check the `iss` (Issuer) claim of an ID Token during its authentication flow, a value that identifies the Originating Party (IdP). This vulnerability may allow attackers to subvert the authentication flow, potentially gaining administrator access to Jenkins. OpenId Connect Authentication Plugin 4.355.v3a_fb_fca_b_96d4 checks the `iss` (Issuer) claim of an ID Token during its authentication flow when the Issuer is known.

Related

Alias · CVE (1)

  • CVE-2024-47807 Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a_1de8 and earlier does not check the `iss` (Issuer) claim of an ID Token,… vulnerability

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References