CVE-2024-52553

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Nov 13, 2024
Updated: Nov 15, 2024
CWE ID 613

Summary

CVE-2024-52553 is a vulnerability affecting the Jenkins OpenId Connect Authentication Plugin version 4.418.vccc7061f5b_6d and earlier. This issue allows an attacker to maintain access to a Jenkins instance even after logging out and logging back in, as the plugin fails to invalidate previous sessions. This can lead to unauthorized access and potential data breaches. Users are advised to update to a patched version of the plugin as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share