Vulnerabilities > Jenkins > Saml Single Sign ON > 2.3.0

DATE CVE VULNERABILITY TITLE RISK
2023-07-12 CVE-2023-37945 Missing Authorization vulnerability in Jenkins Saml Single Sign on 2.1.0/2.2.0/2.3.0
A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 through 2.3.0 (both inclusive) allows attackers with Overall/Read permission to download a string representation of the current security realm.
network
low complexity
jenkins CWE-862
4.3