Vulnerabilities (CVE)

Filtered by vendor Jenkins Subscribe
Filtered by product Openshift Login
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-37947 1 Jenkins 1 Openshift Login 2023-12-10 N/A 6.1 MEDIUM
Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.
CVE-2023-37946 1 Jenkins 1 Openshift Login 2023-12-10 N/A 8.8 HIGH
Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the previous session on login.