PatchTheCVEopenid connect authentication vulnerabilities and fixes
Recent CVEs affecting openid connect authentication, with upgrade or downgrade steps. 2 tracked.
Also searched as: openidconnectauthentication.
openid connect authentication has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-01-22. Highest priority: CVE-2024-52553 (score 44/100).
- CVE-2025-24399 HIGH 8.8 UPGRADE Jenkins OpenId Connect Authentication Plugin 4.452.v2849b_d3945fa_ and earlier, except 4.438.440.v3f5f201de5dc
- CVE-2024-52553 HIGH 8.8 UPGRADE Jenkins OpenId Connect Authentication Plugin 4.418.vccc7061f5b_6d and earlier does not invalidate the previous
FAQ
How do I fix openid connect authentication vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is openid connect authentication being exploited right now?
None of the tracked openid connect authentication CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which openid connect authentication CVE should I patch first?
CVE-2024-52553 currently ranks highest (44/100): Jenkins OpenId Connect Authentication Plugin 4.418.vccc7061f5b_6d and earlier does not invalidate the previous.