Em resumo
- CVE-2025-47889 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta org.jenkins-ci.plugins:wso2id-oauth, wso2 oauth (jenkins).
- Chance de exploração nos próximos 30 dias (EPSS): 0.65%, maior que 51.1% das vulnerabilidades.
- Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.
Description
In Jenkins WSO2 Oauth Plugin 1.0 and earlier, authentication claims are accepted without validation by the "WSO2 Oauth" security realm, allowing unauthenticated attackers to log in to controllers using this security realm using any username and any password, including usernames that do not exist.
NVD description
In Jenkins WSO2 Oauth Plugin 1.0 and earlier, authentication claims are accepted without validation by the "WSO2 Oauth" security realm, allowing unauthenticated attackers to log in to controllers using this security realm using any username and any password, including usernames that do not exist.
Mais vulnerabilidades de org.jenkins-ci.plugins:wso2id-oauth
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free