Jenkins SAML Plugin Session Fixation vulnerability
Date: 2022-05
Affected: maven/org.jenkins-ci.plugins:saml
Attack vector: deepfake
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2018-1000602
CVE-2018-1000604
CVE-2018-1000609
CWE: CWE-200
CWE-384
CWE-79
CVSS: 6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)

A session fixation vulnerability exists in Jenkins SAML Plugin 1.0.6 and earlier in SamlSecurityRealm.java that allows unauthorized attackers to impersonate another users if they can control the pre-authentication session. SAML Plugin 1.0.7 invalidates the previous session during login and creates a new one.


Mitigations:

Architectural layers (MAESTRO):