CVE-2023-50770

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Jenkins OpenId Connect Authentication Plugin 2.6 and earlier stores a password of a local user account used as an anti-lockout feature in a recoverable format, allowing attackers with access to the Jenkins controller file system to recover the plain text password of that account, likely gaining administrator access to Jenkins.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-522

Affected software

Vendor	Product	Versions
Jenkins Project	Jenkins OpenId Connect Authentication Plugin	<= 2.6

References

http://www.openwall.com/lists/oss-security/2023/12/13/4Mailing List
https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3168Vendor Advisory
http://www.openwall.com/lists/oss-security/2023/12/13/4Mailing List
https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3168Vendor Advisory

Timeline

Published: Dec 13, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-507716.1Jenkins OpenId Connect Authentication Plugin 2.6 and earlier improperly determines that a redirect URL after login is legitimately pointing CVE-2023-507724.3Jenkins Dingding JSON Pusher Plugin 2.0 and earlier stores access tokens unencrypted in job config.xml files on the Jenkins controller where CVE-2023-507734.3Jenkins Dingding JSON Pusher Plugin 2.0 and earlier does not mask access tokens displayed on the job configuration form, increasing the pote CVE-2023-507748.1A cross-site request forgery (CSRF) vulnerability in Jenkins HTMLResource Plugin 1.02 and earlier allows attackers to delete arbitrary files CVE-2023-507754.3A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers to copy jobs.CVE-2023-507764.3Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier stores PaaSLane authentication tokens unencrypted in job config.xml files on the Jenkins CVE-2023-507774.3Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier does not mask PaaSLane authentication tokens displayed on the job configuration form, inc CVE-2023-507788.8A cross-site request forgery (CSRF) vulnerability in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allows attackers to connect to an at CVE-2023-507794.3Missing permission checks in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allow attackers with Overall/Read permission to connect to a CVE-2023-50786.7A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileges to tamper with BIO CVE-2023-507808.8Apache ActiveMQ Artemis allows access to diagnostic information and controls through MBeans, which are also exposed through the authenticate CVE-2023-507817.5A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges,