{"id":"GHSA-939x-6mwj-96r2","summary":"Insufficient Session Expiration in Jenkins Azure AD Plugin","details":"Jenkins Azure AD Plugin 303.va_91ef20ee49f and earlier does not invalidate the previous session on login.","aliases":["CVE-2023-24426"],"modified":"2023-11-08T04:11:44.798273Z","published":"2023-01-26T21:30:18Z","database_specific":{"severity":"HIGH","github_reviewed":true,"github_reviewed_at":"2023-02-04T00:30:33Z","nvd_published_at":"2023-01-26T21:18:00Z","cwe_ids":["CWE-613"]},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24426"},{"type":"PACKAGE","url":"https://github.com/jenkinsci/azure-ad-plugin"},{"type":"WEB","url":"https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2980"}],"affected":[{"package":{"name":"org.jenkins-ci.plugins:azure-ad","ecosystem":"Maven","purl":"pkg:maven/org.jenkins-ci.plugins/azure-ad"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"303.va"}]}],"versions":["0.1.1","0.1.1-1","0.2.0","0.3.0","0.3.1","0.3.2","0.3.3","0.3.4","1.0.0","1.1.0","1.1.1","1.1.2","1.2.0","1.2.1","1.2.2","1.2.3","146.vb688d1511c38","150.vb3db9f880321","152.v1609ed460604","153.v7af57b288088","154.v12e17a5f9ea3","155.v745ce80af7ea","157.v2d3d5782a602","158.v437429002c6b","164.v5b48baa961d2","165.v36344b7d7ca7","167.v34c2c5a3a030","168.ve6e7e368dbf6","170.v0a6219442a99","171.v9ef20c94d336","172.vf6a517c3329a","173.v0a210fffb510","174.vc2d906355813","175.v5513346d764a","177.v80b6c1591bf9","178.v7b93892fbe4c","179.vf6841393099e","180.v8b1e80e6f242","183.vf8c6fa4c6567","184.v44f04b65bdd5","185.v3b416408dcb1","188.v2369adb95a31","189.v2da14dccdb43","190.v872b1977148a","191.vfc8019068670","194.v70a6d5203ce4","195.v8555a0bf0d22","213.v5b_00db_295f49","218.v90f6a_980b_a_61","233.v934e074916c7","234.vb_ece34ecd5ff","241.vb_e5cd7c35b_2e","267.v5b_dfb_514d9fd"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/01/GHSA-939x-6mwj-96r2/GHSA-939x-6mwj-96r2.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}