CVE-2023-37945 (published 2023-07-12T15:52:48.355Z)
A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 through 2.3.0 (both inclusive) allows attackers with Overall/Read permission to download a string representation of the current security realm.
Affected products: Vendor: Jenkins Project
Product: Jenkins SAML Single Sign On(SSO) Plugin
Versions: 2.1.0