CVE-2015-5298CWE-287

The Google Login Plugin (versions 1.0 and 1.1) allows malicious anonymous users to authenticate successfully against Jenkins instances that are supposed to be…

published July 7, 2022

CVSS
—
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

The Google Login Plugin (versions 1.0 and 1.1) allows malicious anonymous users to authenticate successfully against Jenkins instances that are supposed to be locked down to a particular Google Apps domain through client-side request modification.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00691 · 52.2th percentile
Weakness
CWE-287 · Improper Authentication
Published
2022-07-07T18:35Z
EPSS history
Timeline
  • 07 JUL 18:35Z
    The Google Login Plugin (versions 1.0 and 1.1) allows malicious anonymous users to authenticate successfully against Jenkins instances that are supposed to be…
    cvelistv5