CVE-2015-5298CWE-287

CVE-2015-5298: vulnerability in Jenkins Google Login Plugin

Published · Updated

Follow this CVE+ Monitor Jenkins Google Login Plugin+ Monitor org.jenkins-ci.plugins:google-login

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.7%
The Google Login Plugin (versions 1.0 and 1.1) allows malicious anonymous users to authenticate successfully against Jenkins instances that are supposed to be locked down to a particular Google Apps domain through client-side request modification.
Affected products
n/a · Jenkins Google Login Plugin