← CVE Intelligence

CVE-2025-64131

Jenkins Project / Jenkins SAML Plugin PUBLISHED

Description (CNA)

Jenkins SAML Plugin 4.583.vc68232f7018a_ and earlier does not implement a replay cache, allowing attackers able to obtain information about the SAML authentication flow between a user's web browser and Jenkins to replay those requests, authenticating to Jenkins as that user.

Affected (CNA)

Vendor / productVersions
Jenkins Project / Jenkins SAML Pluginaffected 0 through 4.583.vc68232f7018a_

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.