[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5t5Khdg7N4xV-9mNITuxZWFW5kQQTXvml7pQF7h-l_c":3,"g5a-ex:jenkins\u002Fopenid_connect_authentication@*":251,"g5a-family:jenkins\u002Fopenid_connect_authentication":253},{"success":4,"data":5},true,{"product":6,"versions":130,"topVulnerabilitiesByEpss":188,"kevVulnerabilities":229,"seoMetadata":230,"meta":249},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":129},"jenkins","openid_connect_authentication",57,7,0,"2025-01-22",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"1.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"1.1",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"1.2",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"1.3",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"1.4",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"1.5",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"1.6",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"1.7",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"1.8",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.0",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"2.1",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"2.2",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"2.3",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"2.4",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"2.5",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"2.6",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"3.0",{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},"4.223.v503b_9a_75a_8a_f",{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},"4.224.v62720cfa_026e",{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},"4.225.v03326773b_44b",{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},"4.227.v36610663f760",{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},"4.228.v0c3e8682ff1f",{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},"4.229.vf736b_fec02f4",{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},"4.236.v4124503b_a_f88",{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},"4.238.v0021f710b_b_f4",{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},"4.239.v325750a_96f3b",{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},"4.250.v5a_d993226437",{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},"4.257.v5360e8489e8b",{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},"4.269.va_7526f34f306",{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},"4.279.vca_c1e2fdd24b",{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},"4.284.v0cc21de03d37",{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},"4.290.v6f5e8da_e98b_2",{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},"4.297.vcddb_d8a_e4694",{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},"4.299.v5ca_eb_6a_f3e6d",{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},"4.303.v84089a_708ea_7",{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},"4.320.v23537cb_a_b_5c6",{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},"4.324.vfd49d010926b",{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},"4.329.v994d3f265d68",{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},"4.330.v6fdfc07513e3",{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},"4.331.vd925b_f76f3a_c",{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},"4.340.ve70636c6590e",{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},"4.346.v10401f543622",{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},"4.350.v347c3b_8b_9d95",{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},"4.354.v321ce67a_1de8",{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},"4.355.v3a_fb_fca_b_96d4",{"version":106,"cve_count":11,"kev_count":11,"has_kev":16},"4.371.vc7c0c06e8a_f5",{"version":108,"cve_count":11,"kev_count":11,"has_kev":16},"4.388.v4f73328eb_d2c",{"version":110,"cve_count":11,"kev_count":11,"has_kev":16},"4.409.ve864b_f48b_0f3",{"version":112,"cve_count":11,"kev_count":11,"has_kev":16},"4.411.v990b_9d36e74e",{"version":114,"cve_count":11,"kev_count":11,"has_kev":16},"4.418.vccc7061f5b_6d",{"version":116,"cve_count":11,"kev_count":11,"has_kev":16},"4.421.v5422614eb_e0a",{"version":118,"cve_count":11,"kev_count":11,"has_kev":16},"4.438.440.v3f5f201de5dc",{"version":120,"cve_count":11,"kev_count":11,"has_kev":16},"4.438.v6e62f6782770",{"version":122,"cve_count":11,"kev_count":11,"has_kev":16},"4.444.vd4c54f157201",{"version":124,"cve_count":11,"kev_count":11,"has_kev":16},"4.452.v2849b_d3945fa",{"version":126,"cve_count":11,"kev_count":11,"has_kev":16},"4.453.v4d7765c854f4",{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},"4.457.v8d7c72676cfe","Openid Connect Authentication by Jenkins is a technology product with 57 tracked versions and 7 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},{"version":106,"cve_count":11,"kev_count":11,"has_kev":16},{"version":108,"cve_count":11,"kev_count":11,"has_kev":16},{"version":110,"cve_count":11,"kev_count":11,"has_kev":16},{"version":112,"cve_count":11,"kev_count":11,"has_kev":16},{"version":114,"cve_count":11,"kev_count":11,"has_kev":16},{"version":116,"cve_count":11,"kev_count":11,"has_kev":16},{"version":118,"cve_count":11,"kev_count":11,"has_kev":16},{"version":120,"cve_count":11,"kev_count":11,"has_kev":16},{"version":122,"cve_count":11,"kev_count":11,"has_kev":16},{"version":124,"cve_count":11,"kev_count":11,"has_kev":16},{"version":126,"cve_count":11,"kev_count":11,"has_kev":16},{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},[189,197,205,210,216,219,225],{"cveId":190,"description":191,"publishedDate":192,"cvssScore":193,"cvssVersion":194,"severity":195,"isKev":16,"epssScore":196},"CVE-2023-24424","Jenkins OpenId Connect Authentication Plugin 2.4 and earlier does not invalidate the previous session on login.","2023-01-26",8.8,"v3.1","High",0.0118,{"cveId":198,"description":199,"publishedDate":200,"cvssScore":201,"cvssVersion":202,"severity":203,"isKev":16,"epssScore":204},"CVE-2019-1003021","An exposure of sensitive information vulnerability exists in Jenkins OpenId Connect Authentication Plugin 1.4 and earlier in OicSecurityRealm\u002Fconfig.jelly that allows attackers able to view a Jenkins administrator's web browser output, or control the browser (e.g. malicious extension) to retrieve the configured client secret.","2019-02-06",4.3,"v3.0","Medium",0.01131,{"cveId":206,"description":207,"publishedDate":208,"cvssScore":193,"cvssVersion":194,"severity":195,"isKev":16,"epssScore":209},"CVE-2024-52553","Jenkins OpenId Connect Authentication Plugin 4.418.vccc7061f5b_6d and earlier does not invalidate the previous session on login.","2024-11-13",0.00636,{"cveId":211,"description":212,"publishedDate":213,"cvssScore":214,"cvssVersion":194,"severity":195,"isKev":16,"epssScore":215},"CVE-2024-47806","Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a_1de8 and earlier does not check the `aud` (Audience) claim of an ID Token, allowing attackers to subvert the authentication flow, potentially gaining administrator access to Jenkins.","2024-10-02",8.1,0.00632,{"cveId":217,"description":218,"publishedDate":213,"cvssScore":214,"cvssVersion":194,"severity":195,"isKev":16,"epssScore":215},"CVE-2024-47807","Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a_1de8 and earlier does not check the `iss` (Issuer) claim of an ID Token, allowing attackers to subvert the authentication flow, potentially gaining administrator access to Jenkins.",{"cveId":220,"description":221,"publishedDate":222,"cvssScore":223,"cvssVersion":194,"severity":203,"isKev":16,"epssScore":224},"CVE-2023-50771","Jenkins OpenId Connect Authentication Plugin 2.6 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.","2023-12-13",6.1,0.006,{"cveId":226,"description":227,"publishedDate":12,"cvssScore":193,"cvssVersion":194,"severity":195,"isKev":16,"epssScore":228},"CVE-2025-24399","Jenkins OpenId Connect Authentication Plugin 4.452.v2849b_d3945fa_ and earlier, except 4.438.440.v3f5f201de5dc, treats usernames as case-insensitive, allowing attackers on Jenkins instances configured with a case-sensitive OpenID Connect provider to log in as any user by providing a username that differs only in letter case, potentially gaining administrator access to Jenkins.",0.0055,[],{"title":231,"metaDescription":232,"keywords":233,"structuredData":234},"Openid Connect Authentication by Jenkins - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Openid Connect Authentication by Jenkins covering 57 versions with 7 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Openid Connect Authentication vulnerabilities, Openid Connect Authentication security, Openid Connect Authentication CVE, Jenkins Openid Connect Authentication, Openid Connect Authentication threat intelligence, Jenkins security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":235,"@type":236,"name":237,"description":232,"url":238,"manufacturer":239,"applicationCategory":243,"softwareVersion":244,"mainEntity":245},"https:\u002F\u002Fschema.org","SoftwareApplication","Openid Connect Authentication","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fjenkins\u002Fopenid_connect_authentication",{"@type":240,"name":241,"url":242},"Organization","Jenkins","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fjenkins","Security Software","57 versions tracked",{"@type":246,"name":247,"description":248,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Openid Connect Authentication Security Vulnerabilities","Security vulnerabilities affecting Openid Connect Authentication by Jenkins",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":250,"apiVersion":48},"2026-10-18T17:31:07.988Z",{"rows":252,"total":11,"capped":16,"failed":11},[],[]]