[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0WRJ7Kl-xghzi2RiK3HkeXail53hbhK1zmRshSQj4Is":3,"g5a-risk:CVE-2024-47806":94},{"success":4,"data":5,"meta":91},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":28,"epssPercentile":25,"epssTimeSeries":29,"severity":30,"affectedProducts":31,"affectedProductsCount":37,"references":38,"referencesCount":37,"weaknesses":44,"weaknessesCount":37,"isActivelyExploited":53,"cisaInfo":25,"otxData":25,"relatedBlogPosts":54,"seoMetadata":55,"configurations":80,"relatedVendorCves":89,"notableEvents":90},"CVE-2024-47806","What is CVE-2024-47806?","Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a_1de8 and earlier does not check the `aud` (Audience) claim of an ID Token, allowing attackers to subvert the authentication flow, potentially gaining administrator access to Jenkins.","Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a_1de8 and earlier does not check the `aud` (Audience) claim of an ID Token, allowing attackers to...","2024-10-02T16:15:10.807","2025-05-06T21:14:25.667",8.1,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":25,"CVSSMetricV2":25,"CVSSMetricV40":25},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","UNCHANGED",null,2.2,5.9,0.00636,[28,28,28,28,28,28,28],"High",[32],{"vendor":33,"product":34,"version":35,"criteria":36,"vulnerable":4},"jenkins","openid_connect_authentication","*","cpe:2.3:a:jenkins:openid_connect_authentication:*:*:*:*:*:jenkins:*:*",1,[39],{"url":40,"source":41,"tags":42},"https:\u002F\u002Fwww.jenkins.io\u002Fsecurity\u002Fadvisory\u002F2024-10-02\u002F#SECURITY-3441%20(1)","Jenkins",[43],"Vendor Advisory",[45],{"id":46,"name":47,"description":48,"extendedDescription":49,"status":50,"abstraction":51,"structure":52},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",false,[],{"title":56,"metaDescription":57,"keywords":58,"canonicalUrl":59,"structuredData":60},"What is CVE-2024-47806? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-47806, a high severity cyber security vulnerability from 2024. Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67...","CVE-2024-47806, CVE-2024-47806 vulnerability, CVE-2024-47806 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, jenkins security, openid_connect_authentication vulnerability","\u002Fwhat-is\u002Fcve-2024-47806",{"@context":61,"@type":62,"headline":56,"description":57,"datePublished":10,"dateModified":11,"author":63,"publisher":67,"about":71,"mainEntityOfPage":75,"articleSection":78,"keywords":79},"https:\u002F\u002Fschema.org","TechArticle",{"@type":64,"name":65,"url":66},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":64,"name":65,"url":66,"logo":68},{"@type":69,"url":70},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":72,"name":6,"description":73,"additionalType":74},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":76,"@id":77},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-47806","Cybersecurity","CVE-2024-47806, CVE-2024-47806 vulnerability, CVE-2024-47806 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[81],{"Operator":25,"Negate":25,"Nodes":82},[83],{"Operator":84,"Negate":25,"CPEMatch":85},"OR",[86],{"Vulnerable":4,"Criteria":36,"MatchCriteriaID":87,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":88,"VersionEndIncluding":25},"DC90B73C-2FD6-45F9-8B70-E7FFDE6F1344","4.355.v3a_fb_fca_b_96d4",[],[],{"lastModified":11,"cacheTime":92,"version":93},1793216283538,"2.0",{"score":95,"band":96,"action":97,"scoredAt":98},46,"Medium","Plan remediation","2026-07-01T10:34:08.519138+00:00"]