CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.7. It affects Jenkins.
CVE
CVE-2023-32994
Severity
LOW
CVSS
3.7
EPSS
0.24%
Jenkins
Original NVD Description
Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 and earlier unconditionally disables SSL/TLS certificate validation for connections to miniOrange or the configured IdP to retrieve SAML metadata, which could be abused using a man-in-the-middle attack to intercept these connections.
Related CVEs
Other vulnerabilities affecting the same vendor(s)