Vulnerability Details CVE-2023-37945
A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 through 2.3.0 (both inclusive) allows attackers with Overall/Read permission to download a string representation of the current security realm.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 16.0%
CVSS Severity
CVSS v3 Score 4.3
References
Products affected by CVE-2023-37945
-
cpe:2.3:a:jenkins:saml_single_sign_on:2.1.0
-
cpe:2.3:a:jenkins:saml_single_sign_on:2.2.0
-
cpe:2.3:a:jenkins:saml_single_sign_on:2.3.0