[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0WRJ7Kl-xghzi2RiK3HkeXail53hbhK1zmRshSQj4Is":3,"g5a-risk:CVE-2024-47806":97},{"success":4,"data":5,"meta":94},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":31,"epssPercentile":25,"epssTimeSeries":32,"severity":33,"affectedProducts":34,"affectedProductsCount":40,"references":41,"referencesCount":40,"weaknesses":47,"weaknessesCount":40,"isActivelyExploited":56,"cisaInfo":25,"otxData":25,"relatedBlogPosts":57,"seoMetadata":58,"configurations":83,"relatedVendorCves":92,"notableEvents":93},"CVE-2024-47806","What is CVE-2024-47806?","Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a_1de8 and earlier does not check the `aud` (Audience) claim of an ID Token, allowing attackers to subvert the authentication flow, potentially gaining administrator access to Jenkins.","Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a_1de8 and earlier does not check the `aud` (Audience) claim of an ID Token, allowing attackers to...","2024-10-02T16:15:10.807","2026-06-17T07:57:47.193",8.1,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":29,"CVSSMetricV40":30},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","UNCHANGED",null,2.2,5.9,[],[],[],0.00632,[31,31,31,31,31,31,31],"High",[35],{"vendor":36,"product":37,"version":38,"criteria":39,"vulnerable":4},"jenkins","openid_connect_authentication","*","cpe:2.3:a:jenkins:openid_connect_authentication:*:*:*:*:*:jenkins:*:*",1,[42],{"url":43,"source":44,"tags":45},"https:\u002F\u002Fwww.jenkins.io\u002Fsecurity\u002Fadvisory\u002F2024-10-02\u002F#SECURITY-3441%20(1)","Jenkins",[46],"Vendor Advisory",[48],{"id":49,"name":50,"description":51,"extendedDescription":52,"status":53,"abstraction":54,"structure":55},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",false,[],{"title":59,"metaDescription":60,"keywords":61,"canonicalUrl":62,"structuredData":63},"What is CVE-2024-47806? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-47806, a high severity cyber security vulnerability from 2024. Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67...","CVE-2024-47806, CVE-2024-47806 vulnerability, CVE-2024-47806 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, jenkins security, openid_connect_authentication vulnerability","\u002Fwhat-is\u002Fcve-2024-47806",{"@context":64,"@type":65,"headline":59,"description":60,"datePublished":10,"dateModified":11,"author":66,"publisher":70,"about":74,"mainEntityOfPage":78,"articleSection":81,"keywords":82},"https:\u002F\u002Fschema.org","TechArticle",{"@type":67,"name":68,"url":69},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":67,"name":68,"url":69,"logo":71},{"@type":72,"url":73},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":75,"name":6,"description":76,"additionalType":77},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":79,"@id":80},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-47806","Cybersecurity","CVE-2024-47806, CVE-2024-47806 vulnerability, CVE-2024-47806 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[84],{"Operator":25,"Negate":25,"Nodes":85},[86],{"Operator":87,"Negate":56,"CPEMatch":88},"OR",[89],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":90,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":91,"VersionEndIncluding":25},"DC90B73C-2FD6-45F9-8B70-E7FFDE6F1344","4.355.v3a_fb_fca_b_96d4",[],[],{"lastModified":11,"cacheTime":95,"version":96},1792353331454,"2.0",{"score":98,"band":99,"action":100,"scoredAt":101},46,"Medium","Plan remediation","2026-10-16T07:03:58.572472+00:00"]