Openshift Login

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-37947 Jul 12, 16:15 Maven MEDIUM PATCH This Month

Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Open Redirect Jenkins Openshift Login

NVD

CVSS 3.1

6.1

EPSS

0.6%

CVE-2023-37946 Jul 12, 16:15 Maven HIGH PATCH This Week

Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the previous session on login. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Jenkins Session Fixation Openshift Login

NVD

CVSS 3.1

8.8

EPSS

0.8%

CVE-2023-37947 Maven

EPSS 1% CVSS 6.1

MEDIUM PATCH This Month

Open Redirect Jenkins Openshift Login

NVD

CVE-2023-37946 Maven

EPSS 1% CVSS 8.8

HIGH PATCH This Week

Information Disclosure Jenkins Session Fixation +1

NVD