Azure Ad vulnerabilities

1 known vulnerability in Azure Ad from Jenkins. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Jenkins Azure AD Plugin: Incorrect Comparison

  CVE-2023-41935Sep 6, 2023Jenkins

  Jenkins Azure AD Plugin 396.v86ce29279947 and earlier, except 378.380.v545b_1154b_3fb_, uses a non-constant time comparison function when checking whether the provided and expected CSRF protection nonce are equal, potentially allowing attackers to use statisti