Veille CVE

Recherche « Jenkins Project Jenkins Microsoft Entra ID (previously Azure AD) Plugin »

2 CVE

Critique 0 Élevée 1 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Jenkins Project Jenkins Microsoft Entra ID (previously Azure AD) Plugin » ✕
  1. CVE-2026-84672 8.8 Élevée

    Jenkins Project Jenkins Microsoft Entra ID (previously Azure AD) Plugin

    Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra group permissions using both the group's unique object ID and its display name, allowing attackers who can create an Entra group with a colliding display name to gain the permissions configured for a privileged group.

  2. CVE-2026-42525 4.3 Moyenne

    Jenkins Project Jenkins Microsoft Entra ID (previously Azure AD) Plugin · Jenkins azure ad

    Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.