Microsoft Entra ID (previously Azure AD)

CloudBees CIVersion: 561.v85263ce9a_b_b_f

Tier 3: Community

Plugin ID: azure-ad

Minimum Jenkins required: 2.479.1

Last released: 2 days, 16 hours ago

A Jenkins authentication & authorization plugin for Microsoft Entra ID (a.k.a. Azure Active Directory, Azure AD)

Credentials stored in plain text(last version affected: 0.3.3)
Client secret transmitted in plain text(last version affected: 1.1.2)
CSRF protection for any URL can be bypassed(last version affected: 179.vf6841393099e)
Session fixation vulnerability(last version affected: 303.va_91ef20ee49f)
Non-constant time nonce comparison(last version affected: 396.v86ce29279947)

Microsoft Entra ID (previously Azure AD) 561.v85263ce9a_b_b_f

SHA1:

4b9b698a8a5fc671541bd877038686b19799d2b0

SHA256:

1fd6406e05d1c4b59028f0b0738be57ce94f1fc5f4ff60cefbd8a4f89514acc2

Maintainers:

Dependencies:

All CloudBees CI Plugins