Jenkins Microsoft Entra ID (previously Azure AD) Plugin vulnerabilities
1 known vulnerability in Jenkins Microsoft Entra ID (previously Azure AD) Plugin from Jenkins. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
Jenkins Microsoft Entra ID (previously Azure…: Authorization Bypass Through User-Controlled Key
Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra group permissions using both the group's unique object ID and its display name, allowing attackers who can create an Entra group with a colliding display name t