CVE-2024-47806

Summary

CVE-2024-47806 is a vulnerability affecting the Jenkins OpenId Connect Authentication Plugin version 4.354.v321ce67a_1de8 and earlier. This issue permits attackers to bypass the authentication flow by not checking the `aud` (Audience) claim in an ID Token. Successful exploitation could lead to unauthorized administrator access to Jenkins systems. Organizations using the Jenkins OpenId Connect Authentication Plugin are urged to update to the latest version to mitigate this risk. Failure to do so may expose sensitive information and grant attackers unauthorized control.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.